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Chapter 1 

The impredicativity of 
induction 



The induction principle is this: if a property holds for 0, and if whenever 
it holds for a number n it also holds for n + 1, then the property holds for 
all numbers. For example, let 6(n) be the property that there exists a 
number m such that 2 • m = n * (n + l). Then 0(0) (let m = 0). Suppose 
2-m = n-(n+l). Then 2 • (m + n + 1) = (n + 1) • ((n + 1) + 1), and thus if 
B{n) then 6{n + 1). The induction principle allows us to conclude B(n) for 
all numbers n. As a second example, let 7r(n) be the property that there 
exists a non-zero number m that is divisible by all numbers from 1 to n. 
Then 7r(0) (let m = 1). Suppose m is a non-zero number that is divisible 
by all numbers from 1 to n. Then m • (n + 1) is a non-zero number that is 
divisible by all numbers from 1 to n + 1, and thus if n(n) then ?r(n + 1). 
The induction principle would allow us to conclude n(n) for all numbers n. 

The reason for mistrusting the induction principle is that it involves an 
impredicative concept of number. It is not correct to argue that induction 
only involves the numbers from to n; the property of n being established 
may be a formula with bound variables that are thought of as ranging over 
all numbers. That is, the induction principle assumes that the natural 
number system is given. A number is conceived to be an object satisfy- 
ing every inductive formula; for a particular inductive formula, therefore, 
the bound variables are conceived to range over objects satisfying every 
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inductive formula, including the one in question. 

In the first example, at least one can say in advance how big is the 
number m whose existence is asserted by B(n): it is no bigger than n-(n + l). 
This induction is bounded, and one can hope that a predicative treatment 
of numbers can be constructed that yields the result 0(n). In the second 
example, the number m whose existence is asserted by 7r(n) cannot be 
bounded in terms of the data of the problem. 

It appears to be universally taken for granted by mathematicians, what- 
ever their views on foundational questions may be, that the impredicativity 
inherent in the induction principle is harmless — that there is a concept of 
number given in advance of all mathematical constructions, that discourse 
within the domain of numbers is meaningful. But numbers are symbolic 
constructions; a construction does not exist until it is made; when some- 
thing new is made, it is something new and not a selection from a pre- 
existing collection. There is no map of the world because the world is 
coming into being. 

Let us explore the possibility of developing arithmetic predicatively. 



Chapter 2 

Logical terminology 



I tried several times to write a brief, clear summary of the logical ter- 
minology that will be used in this investigation, but it always came out 
long and muddy. Instead, I refer the reader to the beautiful exposition in 
Shoenfield's book [Sh], especially the first four chapters. Our logical ter- 
minology and notation are those of [Sh] except for some departures and 
additions that will be indicated. 

Lower case italic letters, possibly with 0, 1, ... as a subscript, are vari- 
ables. The order a, 6, . . . , z, a , &o, • • • , zo, &i 5 • ■ ■ of the variables is called 
alphabetical order. Roman letters are used as in jSh] as syntactical vari- 
ables when talking about expressions. 

We define A x [a] as follows: if no variable occurring in the term a occurs 
bound in the formula A, substitute a for each free occurrence of the vari- 
able x in A; otherwise let Xi, . . . ,x„ be in alphabetical order the variables 
that occur in a and occur bound in A, let yi,...,y„ be in alphabetical 
order the first v variables distinct from all variables occurring ir. A or a, 
substitute y^ for each bound occurrence of x M in A for all fi from 1 to i/, 
and then substitute a for each free occurrence of x. For example, if A is 

VxVy (x + y) + z = x + (y + z) , 

then A z [0] is VxVy (x + y) + = x + (y + 0) and K z \x] is VaVy (a + y) + x = 
a + (y + x). We write 

A Xl ... x Ja! . . . a„] for A Xl [a^ . . . x „ [a„]. 
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We make the following abbreviations, in addition to those of [Sh]. If 
pi, . . . , Pj, are binary predicate symbols, we write 

aopiai . . . a^-ip^a^ for a piai &; ■ ■ • & a^-ip^aj,, 

as in x — y = z for x = y & y = z. We follow [Sh] is associating V, &;, and 
— > from right to left, and letting V and & take precedence over — * and <-+ 
in restoring parentheses, so that 

Aj • . . _> A„_i -+ A„ 
is equivalent to 

Ai & ■ • • &; A^_! — * A„, 
but we adopt the convention that 

Ai >*-♦■ • •■+-► A^-i *-* & u 
is an abbreviation for 

(Ai *-> A 2 ) & ■ • • & (A„_i +-* A„). 

If A is Ai — ► A 2 , we write hypA for Aj and con A for A 2 . If A is A 1 +-+ A 2 , 
we write //is A for A 2 and rhsA for A 2 . We write 

3!xA for 3x(A & Vy(A x [y] y = x)), 

where y is the first variable in alphabetical order distinct from x and all 
variables occurring in A. If all bound occurrences of x in A occur in the 
part 3xB, we write scope^ x k for B, and similarly with 3 replaced by 3! or V. 
We write the defining axiom of a function symbol f as 

fx! . . . x„ = y ^ D 

(instead of y = fx 2 . . . x„ <-> D as in [Sh,§4.6]). Sometimes we write it in the 
form 

fxj . . . x„ = y +-» A, otherwise y = e 
where e is a constant. This is an abbreviation for 
fxi . . . x„ = y <-> A V (^3yA & y = e). 
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Then the existence condition is trivial, but the uniqueness condition still 
has to be verified. Also, we sometimes adjoin a new function symbol f by 
writing 

fxj . . . x^ — a 

where a is a term containing no variable other than Xi, . . . ,x„; the defining 
axiom is understood to be 

fxi . . . = y y = a 

where y is the first variable in alphabetical order distinct from xi, . . . ,x„. 

A formula will be called unary in case one and only one variable occurs 
free in it. If C is unary and x is the variable occurring free in it, we write 
C[a] for C x [a]. Let C be a unary formula. Then we write Ac for the formula 
obtained by replacing each part of A of the form 3yB by 3y(C[y] & B). (We 
follow [Sh] in regarding Vy as an abbreviation for ->3y->; if one chooses not 
to eliminate the defined symbol V, then an equivalent formula is obtained if 
in addition one replaces each part of A of the form VyB by Vy(C[y] — » B).) 
Let Xi,...,x„ be in alphabetical order the variables occurring free in A; 
then we write 

C(freeA) for C[xij & & C^j. 

If A is closed, then C(/reeA) is the empty expression; we make the conven- 
tion that if A is closed, then a]] occurrences of "C(/reeA)" together with 
attendant logical connectives are to be deleted. (In general, I will not. worry 
about the distinction between use and mention, but in this case I use quo- 
tation marks lest the reader be puzzled as to how to go about deleting the 
empty expression.) We write 

A c for C(/reeA) -* A c 

and call A c the relativization of A by C. 

Let C be a unary formula of a theory T. For f a v-zxy function symbol, 
we say that C respects f in case 

h T C[X!] -> ► C[x u ] -> Cjfz! ...x v \. 
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We say that C respects A in case h T A c . We say that C is inductive in 
case C respects and S (assuming T to contain the constant and the 
unary function symbol S), so that C is inductive if and only if 

h T C[0] & (C[x) -> C[Sac]) 

(or, equivalently, if and only if h T C[0] & Vx(C[x] -+ C|Sz])). We say that C 
is hereditary in case 

h T C[x] &y<x^ C\y] 

(assuming T to contain the binary predicate symbol <). If C is also unary, 
we say that C is stronger than C in case 

h T C'[x] C[z]. 

If x occurs free in A and y } ,. . . ,y„ are in alphabetical order the variables 
distinct from x that occur free in A, we write 

A/x for Vyj - --Vy^A, 

and we say that A in inductive in x in case A/ x is inductive. If p is a unary 
predicate sumbol, we say that p is inductive, etc., in case the formula p(x) 
is inductive, etc. 

The definitions in the preceding paragraph are all relative to the the- 
ory T. If T is not dear from the context, we add in T. 
We write 

ind x A for A x [0j & Vx(A — > A x [Sx]). 

An induction formula is a formula of the form ind x A — > A. 

We write T[jBi, . . . , B A ; for the theory obtained by adjoining to the lan- 
guage of T all of the new nonlogical symbols in Bi, . . . ,B> and then adjoin- 
ing Bi , B> as nonlogical axioms. 

Let C be a unary formula of the theory T. We say that C respects T 
in case C respects every function symbol and nonlogical axiom of T and 
i~t 3xC*x\. This last condition follows from the first if T contains a con- 
stant (0-ary function symbol) e, for then hx C[e]. Let C respect T, let U 
be the extension by definitions of T obtained by adjoining the unary pred- 
icate symbol Uj with defining axiom Uix <->• C[x], and let m be u for each 
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nonlogical sumbol u of T. Then we have an interpretation (see [Sh,§4.7]) of 
T in U, which we call the interpretation associated with C. 

We write (£), where f is some label, as an abbreviation for the formula 
with that label, and we do not hesitate to treat it as a formula. For example, 
the formula with label 3.4 will be found in Chapter 3; it is x + Sy = S(x + y), 
so (3.4) v [0] is x + SO = S(x + 0). 

When we introduce a hypothesis in a proof we use the word suppose, 
and the discharge of the hypothesis is indicated by the word thus. (Suppose 
we adopt this convention (suppose, that is, that in proofs we use these two 
words (suppose and thus) in the manner indicated, and only thus). Then 
these two words (suppose and thus) function much as parentheses (suppose 
playing the role of the left parenthesis, with the role of the right parenthesis 
being played by thus). We hope to achieve clarity thus.) 

As is customary in mathematics, we use letters — for the purposes of this 
paragraph, a letter is an italic lower case letter possibly with 0, 1, ... as a 
subscript — sometimes as variables and, in the course of a proof, sometimes 
as constants, and a single letter may play both roles in a given proof. When 
we have proved 3x 1 • • • Elx^A, we indicate the introduction of constants (see 
the discussion of special constants in [Sh,§4.2]) by writing 

there exist x 1? . . . , and x„ such that A 

(with the appropriate change in grammar or punctuation when v is 1 or 2). 

We write 

let X] = ai, . . . , x„ = a„ 
instead of 

there exist x u .... and x^ such that x x — aj & ■ ■ ■ & x„ ~ a„. 

A numeral is an expression of the form S • • • SO. We use n, possibly with 
a subscript, as a syntactical variable for numerals, and v is an abbreviation 
for the numeral with v occurrences of S. 



Chapter 3 

The axioms of arithmetic 



By Peano Arithmetic we mean the theory / whose nonlogical symbols 
are the constant 0, the unary function symbol S (successor), and the binary 
function symbols + and •, and whose nonlogical axioms are 

3.1 Ax. Sx ^ 0, 

3.2 Ax. Sx - Sy — ► x — y, 

3.3 Ax. x + = x, 

3.4 Ax. x -+ Sy — S(x + y), 

3.5 Ax. z ■ - 0, 

3.6 Ax. x ■ Sy — x ■ y + z, 

and all induction formulas in the language of 7. We have adopted the usual 
convention that ■ takes predecence over + in restoring parentheses, so that 
(3.6) is an abbreviation for x • Sy — (x • y) + x. 

If we simply drop the induction formulas as axioms, then the resulting 
theory is too weak to be of much arithmetical interest; a model-theoretic 
argument to this effect is given by Mostowski, Robinson, and Tarski in 
[MRT,pp.62-64j. 

Robinson's theory (see [Ro]) is the theory Q with the language of J 
whose nonlogical axioms are (3.l)-(3.6) and the following formula (which 
is a theorem of / since it is easily proved by induction): 

R. x ^ -> 3y Sy = x. 
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This beautiful and much studied theory is in a sense a minimal axiomati- 
zation of arithmetic. We will work only in theories that are interpretable 
in Q. 

It will be convenient to reformulate Q as an open theory. The formula 

3.7 Ax. Fx = y <-> Sy - x V (x = & y - 0) 

is the defining axiom of a unary function symbol P (predecessor) that can 
be adjoined to Q; the existence condition holds by (R) and the uniqueness 
condition holds by (3.2). Let Q be the theory whose nonlogical symbols 
are those of Q together with P and whose nonlogical axioms are (3.l)-(3.7); 
then (R) is a theorem, but not an axiom, of Q . 

To get to the main point more quickly, let us at first adjoin the associa- 
tive, distributive, and commutative laws: 

3.8 Ax. (x + y) + z = x + {y + z), 

3.9 Ax. x ■ (y + z] — x ■ y + x • z, 

3.10 Ax. (x ■ y) • z — x • (y * z), 

3.11 Ax. x + y = y + x, 

3.12 Ax. x ■ y — y • x. 

Let Qi be Q with (3.8)-(3.12) as additional axioms. Later we will inves- 
tigate how to avoid assuming these as axioms. 



Chapter 4 
Order 



The following formula is the defining axiom of a binary predicate symbol 
that we adjoin to Qi'. 

4.1 Def. z<y<r~>3zx-\-z — y. 

Call the resulting theory Q\. In this chapter we prove a few simple theorems 
in Q\. 

4.2 Thm. < x < x < Sx. 

Proof, We have + x = x by (3.3) and (3.11), so < x. We have 
x-i = x by (3.3), so x < x, and x + SO = S(x + 0) = Sx by (3.4) and (3.3), 
so x < Sx. 

4.3 Thm. x <0 -* x = 0. 

Proof. Suppose x < 0. Then there exists z such that x + z = 0. Suppose 
z — 0. Then x = by (3.3) and thus z — — + x = 0, so suppose z ^ 0. 
Then SPz = 2 by (3.7), so that x + SP2 = 0, and S(x + Vz) = by (3.4), 
which is impossible by (3.1). Thus z = and x = 0, and thus (4.3). 

4.4 Thm. y<Sx<^y<xVy — Sx. 

Proof. Suppose y < x. Then there exists z such that y + 2 = x, and by 
(3.4) we get y + Sz = S(y + z) = Sx, and so y < Sx. Thus y < x — > y < Sx. 
Suppose y — Sx. Then y < Sx by (4.2) and thus rhs(4A) — * /&s(4.4). 
Conversely, suppose y < Sx, so that there exists z such that y -f 2 = Sx. 
Then z = -► y = Sx by (3.3), so suppose 2^0. Then SPz = z by (3.7) 
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and so y + SPz = Sx. By (3.4), S(y + Pz) - Sx and then y + Pz = x by 
(3.2), so that y < x. Thus 2 ^ y < x, and thus (4.4). 

4.5 Thru. x<y$>zy<z—>x<z. 

Proof. Suppose hyp(4.5). Then there exist u and v such that x + u = 
y & y + v = z. Then z — (x + ti) + v — x + (u + u) by (3.8), and so 1 < 2, 
Thus (4.5). 

4.6 Thm. Px < x. 

Proo/. We have PO < by (3.7) and (4.2), so suppose x ^ 0. Then 
x = SPx = SPx + = 0+ SPx = S(0 + Px) = S(Px + 0) = Px + SO by 
(3.7), (3.3), (3.11), and (3.4), so that Px < x. Thus (4.6). 

4.7 Thm. x<y-^z-\-x<z + y. 

Proof. Suppose x < y. Then there exists u such that x + u — y. 
Therefore (z + x) + u = z + (x + u) - z + y by (3.8), and thus (4.7). 

4.8 Thm. x<y^z-x<z-y. 

Proof. Suppose x < y. Then there exists u such that x + u = y. 
Therefore z-x+z-u = z-(x + u) = z - y by (3.9), and thus (4.8). 



Chapter 5 

Induction by relativization 



Let C be a unary formula. We use the following abbreviations: 

C 1 for Vy(y<x-C[y]), 

C 2 for VrtC^l-CMv + x]), 

C 3 for \fy(C 2 [y\^C 2 \yx\). 

Then C 1 , C 2 , and C 3 are unary formulas with free variable x. We will show 
that if C is inductive, then C 3 is stronger than C, is hereditary, and is not 
only inductive but respects P, + , and the defining axiom of <. This 
relativization scheme is due to R. Solovay; see [PD] and [Puj. 

Metatheorem 5.1 Let T be an extension of Q\ (possibly Q\ itself), and 
let C be a unary formula of T. Then the following is a theorem of T: 

REL. C[0) k \fx(C[x] -h. C[Sx]) 

(c 3 H - c[x]) & 

(C 3 [xj & u < x -> C 3 [u]) & 
C 3 [0] k 

{C 3 {x} -> C 3 [Sx}) k 
(C*[x) - C 3 [P*]) k 

(c 3 !^] k c 3 [x 2 ) - c 3 !^ + x 2 \) k 

{C 3 ^} & C 3 \x 2 ] C*\ Xl ■ x 2 \) k 

(C 3 [z] & C%] - {x < y <- 3z(C 3 [z] kx + z = y))). 
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Demonstration. We prove (REL) in T as follows. Suppose Ziyp(REL). 
Then we claim: 



1 

1. 


C [xj L/[xJ, 




2. 


C^O], 




3. 


C^xj — > C^bxj, 




4. 


O [Xj 6C U S ^ — 




5. 


c a [*]-c l [*], 




6. 


C 2 [0], 




7. 


C 2 [x] ->C 2 [Sx], 




8. 


C 2 [x] & u < x - 


♦ c 2 H 


9. 


c 2 !^] & c 2 [x 2 ] 


-+C 2 [x 1 + x 2 ]; 


10. 


C 3 [x] -> C 2 [x], 




11. 


C 3 [0], 




12. 


C 3 [x] -> C 3 [Sx], 




13. 


C 3 [x] & u < x - 


* C 3 [u], 


14. 


C 3 ^] & C 3 [x 2 ] 


- C 3 [x 1 -^x 2 }, 


15. 


C 3 [x!l k C 3 [x 2 ] 


-C^-x,]. 



Suppose C^xJ. By (4.2) we have C[x], and thus (l). Suppose y < 0. 
Then y = by (4.3), so that C[y] and thus (2). Suppose C^x] k y < Sx. 
By (4.4), y < x V y — Sx. But y < x -+ C[y], so suppose y = Sx. By (1) 
we have C[x] and so C[Sx], i.e. C\y). Thus C[y], and thus (3). Suppose 
C^x] k u < x k y <u. Then y < x by (4.5), and so C[y]. Thus (4). 

Suppose C 2 [x]. By (2) we have C^O + x], but + x = x by (3.11) 
and (3.3), so that C x [x], and thus (5). We have (6) by (3.3). Suppose 
C 2 [x] k C 1 ^]. Then C : [y + x], and so C^Sfy + x)] by (3). But S(y + x) = 
y+Sx by (3.4), and so C^y+Sxj. Thus (7). Suppose C 2 [x] k u < x k C 1 ^]. 
Then y + u<y + x by (4.7), so that C l [y + u] by (4), and thus (8). Suppose 
C 2 [xi] k C 2 [x 2 ] k C^y]. By (3.8), y+(x! + x 2 ) = (y + xxj+xj, but we have 
C l [y + xj] and therefore (^[(y + x x ) + x 2 ], i.e. C^y -+- {x l + x 2 )]. Thus (9). 

Suppose C 3 [x]. We have C 2 [S0] by (6) and (7), and hence C 2 [S0 • x]. 
ButS0-x = x-S0 = x- + x = + x=^x + = xby (3.12), (3.6), 
(3.5), (3.11), and (3.3), so that C 2 [x] and thus (10). We have (11) by (3.5) 
and (6). Suppose C 3 [x) k C 2 [y]. By (3.6), y • Sx = y ■ x + y. We have 
C 2 [y • x], so (9) yields C 2 [y • x + y], i.e. C 2 [y • Sx], and thus (12). Suppose 
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C 3 [x] & u < x & C 2 [y). Then y ■ u < y ■ x by (4.8). We have C 2 [y • x], so 
C 2 [y • u] by (8), and thus (13). Suppose C^xj] & C 3 [x 2 ] h C 2 \y\. By (3.9), 
y • (xi + x 2 ) - V * a?i + 2/ ' £2- We have C 2 [y • Xi] and C 2 [y • x 2 ], so by (9) we 
obtain C 2 [y • X! + y ■ x 2 ], i.e. C 2 [y • (xi + x 2 )], and thus (14). Again suppose 
C 3 [x!] & C 3 [x 2 ] & C 2 [yj. We have C 2 [y • x x ) and therefore C 2 [(y • a*) ■ x 2 ]. 
But (y-xi) -x 2 — y-(xi-x 2 ) by (3.10), so that Q 2 [y ■ {x Y ■ x 2 )], and thus (15). 

By (10), (5), and (l) we have C 3 [x] -> C\x}. By (4.6) and (13) we 
have C 3 [x] ^-C 3 [Px]. Finally, suppose C 3 [x] & C z [y\. It is trivial that 
3£(C 3 [z] k. x + z — y) — > x < j/, so suppose x < y. Then there exists 2 such 
that x + z = y. By (3.11), z + x = y, so 2 < y and by (13) we obtain C 3 [2]. 
Thus x < y 32(C 3 [2] & x + z = y), and thus C 3 [xj & C 3 [y] -+ (x < y <-> 
3z(C 3 f 2 ] fcx + z = y)). □ 

If we regard the concept of number as being in need of clarification, 
then we can seek to clarify the concept by formalizing it. We can do this, 
for example, by postulating the simple algorithmic properties (3.1)-(3.12), 
adjoining defining axioms, and proving theorems, such as the theorems 
of Qj proved in Chapter 4. But this theory is very weak, and in it we 
can prove very little of what we want to prove about numbers. Let C be 
an inductive formula; our intuitive feeling is that if x is a number, then 
C[x] should hold. Now the formula C 3 respects all of the function symbols 
of Q\ and the defining axiom of <, by REL. All of the other nonlogical 
axioms of Q[ are open, so it automatically respects them as well. In other 
words, the entire theory Q\ can be relativized by C 3 . We can replace our 
concept of number (any x) by a more refined concept of number (any x 
such that C 3 [x]). We can read C 3 [x] as "x is a number" (leaving open the 
possibility of formalizing an even more refined concept of number at some 
time in the future). We can ask, if x is a number does C[x] hold? Since C 3 
is stronger than C by REL, the answer is yes, if x is a number then C[x]. 
This satisfies our intuition. But now we can ask, does the formula C hold 
for numbers? This is a different question. It means: if in C 3 [x] — > C[x] 
we replace the quantifiers By in the formula C, which refer to the domain 
of discourse before we refined our concept of number, by 3y(C 3 [y] & . . .), 
which can be read as "there exists a number y such that . . in short, if we 
relativize C by C 3 , is the relativized formula correct? This is the crux. This 
is the point that impredicative arithmetic takes for granted, by postulating 
an affirmative answer in the induction principle. In predicative arithmetic 
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we examine the relativized formula to see whether we can prove it. 

Let us give an example of an inductive formula C for which we can 
indeed prove that C holds for numbers. Consider the first example of 
Chapter 1: Let C be 3m SSO • m = n ■ (n + SO). Then C is inductive in Q\. 
Consider its relativization by C 3 : 

C 3 [n] 3m(C 3 [m] & SSO - m = n ■ {n + SO)). 

Suppose C 3 [n). Then C[n], by REL, so there exists m such that SSO • m = 
n • (n + SO). Since SSO • m — m + m, we have m < n ■ (n + SO) . But we have 
C 3 [0], C 3 [S0], C 3 [n + SO], C 3 [n - (n + SO)], and C 3 [m], all by REL. Thus the 
displayed formula holds. It can be read "if n is a number, then there is a 
number m such that 2 • m — n ■ (n + 1)" . 
If now we let C be 

3m(m ^ & Vfc(fc ^ & k < n -»- 3j k • j = n)), 

which is the second example of Chapter 1, then C is inductive in Q[ but 
there seems to be no way to prove its relativization by C 3 . We do not 
have a way of predicating a concept of number such that whenever n is a 
number, there exists a non-zero number m that is divisible by all numbers 
from 1 to n. 



Chapter 6 

Interpretability in Robinson's 
theory 

For the pleasure of working from minimal assumptions, let us show 
that we can drop the axioms (3.8)-(3.12). We will extend the relativiza- 
tion scheme of the preceding chapter by building into the construction the 
necessary associativity, etc., and then use this to show that Q\ is inter- 
pret able in Qo (and so in Robinson's theory Q). The reader who wishes to 
skip this chapter can simply substitute Q\ for Q in later statements about 
interpretability in Q. 

For this chapter, and this chapter only, we make the abbreviations: 

a for VxVy ( x + y) + z = x -f (y -f z) , 

/? for VzVy (a[x] —> x • (y + z) — x • y + x • z), 

7 for Mxiy (a[x\ & 0\y] -»• (x ■ y) ■ z - x • (y z)), 

6 for Vy (0 + y = z — ► y = z) . 

Then the following are theorems of Q . 
6.1 Tkm. a[0\. 

Proof. We have (z + y) + = £ + y and x + (y + 0) = x -f y by (3.3). 
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6.2 Thm. a\z] -* a[Sz}. 

Proof. Suppose (x -j- y) + z = x + (y + 2). Then (a: + y) + Sz = 
S((x + y) + z) = S(x + (y + 2)) = x + S(y + z) = x + (y + Sat) by (3.4). 
Thus (6.2). 

6.3 Thm. ot[z] -> a[Pz]. 

Proo/. Suppose z = 0. Then Pz = by (3.7), and thus z = (6.3). 
Suppose z / & (x + y) + z = x + (y + z), so that S((x + y) + Pz) = 
(x + y) + SPz = (x + y) + z = x+(y + z) = x+(y + SPz) = x + S(y + Pz) = 
S(x + (y + Pz)) by (3.4) and (3.7). Then (x + y) + Pz = x + (y + Pz) 
by (3.2). Thus z / -> (6.3), and so (6.3). 

6.4 Thm. a[zi] & a[z 2 ] — ► &\z\ + 2 2 ]. 

Proo/. Suppose a[zi] & a[z 2 ]. Then (x + y) + (zi + z 2 ) = ((x + y) + 
zi) +2 2 = (z + (y + Zi)) + z 2 = x+ ((y + zi) +z 2 ) = x + (y + (zi + 22)), and 
thus (6.4). 

6.5 Thm. /?[0]. 

Proof. We have x ■ (y + 0) = x ■ y and x • y + x • = x • y + = x ■ y 
by (3.3) and (3.5). 

6.6 Thm. 0[z\ -+ 0[Sz]. 

Proof. Suppose a[x] & x • (y + z) = x • y + x • z. By (3.4) and (3.6), 
x-(y + Sz) = x-S(y + z) = x-(y + z) + x = (x-y + x-z) + x = x-y+(x-z + x) = 
x • y + x • Sz. Thus (6.6). 

6.7 Thm. 7[0]. 

Proo/. We have (x • y) • = and x • (y • 0) = x • = by (3.5). 

6.8 Thm. 7[z] -> ->[Sz]. 

Proo/. Suppose a[x] & /?[y] &; (x • y) • z = x- (y • z). By (3.6), (x-y)-Sz = 
(x-y)-z + x-y = x-(y-z) + x-y = x-(y-z + y) = x-(y-Sz), and thus (6.8). 

6.9 Thm. x + y = 0-+x = 0& y = 0. 

Proof. Suppose x + y = 0, and suppose y = 0. Then x = by (3.5), 
and thus y = — »• x = 0, so suppose y ^ 0. Then S(x + Py) = by (3.4) 
and (3.7), which is impossible by (3.1), and thus y = 0. Thus (6.9). 
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6.10 Thm. 6[0}. 

Proof. Suppose + y = 0. Then y = by (6.9), and thus (6.10). 

6.11 Thm. 6{x] -+ 6[Sx\. 

Proof. Suppose 6[x\ k + y = Sx. Suppose y — 0. Then = Sx 
by (3.3), which is absurd by (3.1), and thus y / 0. By (3.7), SPy = y. 
Hence + SPy = Sx, so that S(0 + Py) = Sx by (3.4) and + Py = x 
by (3.2). Since 6\x], we have Py = x, so that SPy = Sx, i.e. y = Sx, and 
thus (6.11). 

6.12 Thm. S\0 + x] -* x = + x. 

Proof. Suppose 6[0 + x]. Since + x = + x, we have x — + x. 
Thus (6.12). □ 

Let C be a unary formula. We make the following abbreviations: 

C° for C[x) k a[x] k p\x] k ^[x] k 6[x\, 

C 1 for VyVz (y + z = x k ot\z] -» C°[y]), 

C 2 for Vy (C^y] ^[y + x]), 

C 3 for C 2 [x]&Vy (C 2 [y] - C 2 [y ■ x]). 

Metatheorem 6.1 Let T 6e an extension of Q and let C be a unary 
formula of T. Then the following is a theorem of T: 

REL. C[0] k Vx(C[x] -> C[Sx]) — 
(C 3 [x] - C[x]) & 

c 3 [o] & 

(C 3 [x] - C 3 [Sx]) k 
(C 3 [xj -> C 3 [Px]) k 
(C 3 [x 1 ]&C 3 [x 2 ]^C 3 [x 1 + x 2 ])& 

Demonstration. We prove (REL) in T as follows. Suppose Ayp(REL). 
We state and prove a number of claims. 

1. C°[0]. This holds by (6.1), (6.5), (6.7), and (6.10). 

2. C°Ix] C°[Sx], by (6.2), (6.6), (6.8), and (6.11). 
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3. C^x] -+ C°[x]. Suppose C 1 ^ It follows from (3.3) and (6.1) that 
x -f = x k a[0], and consequently C°[x]. Thus (3). 

4. C^O]. Suppose y + z = 0. Then y = by (6.9), and so C°[y] by (1). 
Thus (4). 

5. C^x] -»■ C^Sx]. Suppose C J [x] k y + z = Sx & a[z]. We need to 
show C°[y]. Suppose 2 = 0. Then y = Sx by (3.3). By (3) we have C°[x] 
and from (2) we obtain C°(Sx], i.e. C°[y]. Thus z — — ► C°[y], so suppose 
z^O. Then SPz = z by (3.7), and so S(y + Pz) = y + SPz = y + 2 = Sx 
by (3.4). Consequently y + P2 = x, by (3.2). But since a[z] we have a[Pz] 
by (6.3), and since C^x] we have C°[y]. Thus z ^ -> C°[y], and so C°[y]. 
Thus (5). 

6. C^x] k u+v — x k a[v] — > C^u]. Suppose /*yp(6) k y+z = u & a\z\. 
We need to show C°[y]. We have (y + z) + v = x, and since a[vj we obtain 
y + (z + v) = x. But a[z + v] by (6.4)," and since C^x] we get C°[y]. Thus 
hyp (6) -* C x [u], i.e. (6). 

7. C 2 [x] -> C 1 ^. Suppose C 2 [x]. We have C^O] by (4), so we have 
C^O+xj^. Therefore C°[0+x] by (3), and hence <5(0 + x]. By (6.12), x = 0+x 
and so C^x]. Thus (7). 

8. C 2 [0], by (3.3). 

9 v C 2 |x] C 2 [Sx]. Suppose C 2 [x] k C^y]. We need to show C^y + Sx]. 
But C^y + x], and so C^Sfy + x)] by (5). By (3.4) we find C^y + Sx], and 
thus (9). 

10. C 2 [x] k u + v = x k a[v\ -» C 2 [u]. Suppose hyp (10) k C l \y}. We 
need to show C^y + u}. But (y + u) + t; = y + (u + v ) since a[f], and 
so (y + u) + v = y + x. We have C^y + x], since C 2 [x] k C 1 [y], and we 
have a[vj. Hence C 2 [y + u] by (6), and thus (10). 

11. C 2 [zi) k C 2 [x 2 ] -* C 2 [x! + x 2 ]. Suppose C a [xi] k C 2 [x 2 ] & C^y]. 
We need to show C x [y + (xi + x 2 )]. But by (7) and (3) we have C°[x 2 ] and 
therefore c*[x 2 ], so that y + {x x + x 2 ) = (y + x x ) + x 2 . We get C*[y + xj] 
from C 2 [x 1 j, and therefore we get C*[(y + Xi) + x 2 ] from C 2 [x 2 j. That is, 
C ! [y + (x! + x 2 )]. Thus (11). 

12. C 3 [x] - C 2 [x], by definition. 

13. C 3 [0], by (8) and (3.5). 

14. C 3 [x] -> C 3 [Sx]. Suppose C 3 [x]. Then C 2 [Sx] by (12) and (9). 
Suppose C 2 [y]. We need to show C 2 [y • Sx]. But y • Sx = y • x + y by (3.6), 
and we have C 2 [y • x], so by (11) we get C 2 [y • x + y], i.e. C 2 [y • Sx]. Thus 
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C 2 [y] C 2 [y • Sx], and thus (14). 

15. C 3 [x] -> C 3 [Px]. We have x~ -> (15) by (3.7), so suppose 
x / & C 3 [x]. First we need to show C 2 [Px]. But Px + SO = S(Px + 0) = 
SPx = x by (3.4), (3.3), and (3.7), and a[S0] by (6.1) and (6.2). By (12) 
we have C 2 [x]. By (10) applied to Px + SO = x we have C 2 [Px]. Now 
suppose C 2 [y). We need to show C 2 [y • PxJ. But y • Px + y — y • SPx = y • x 
by (3.6) and (3.7). Since C 2 [y], we have C°[y] by (7) and (3), and so a[y\. 
Since C 3 [x] & C 2 [y], we have C 2 [y • x\. By (10) applied to y • Px + y = y • x 
we have C 2 [y • Px]. Thus C 2 [y] -> C 2 [y • Px], and thus x ? (15). 
Consequently we have (15). 

16. C 3 [xi] & C 3 [x 2 ] -> C 3 [x! + x 2 ]. Suppose hyp(X6). Then we have 
C 2 [x!] & C 2 [x 2 ] by (12), so C 2 [x! + x 2 ] by (11). Suppose C 2 jy}. We need 
to show C 2 [y • (xj + x 2 )]. By (7) and (3) we have C°[y] and C°[x 2 ], so that 
a[y] and ^[x 2 ]. Hence y ■ (xj + x 2 ) = y • x x + y • x 2 . We have C 2 [y ■ x\] and 
C 2 [y ■ x 2 ], so by (11) we have C 2 [y • Xj + y • x 2 ], i.e. C 2 [y * (x t + x 2 )]. Thus 
C 3 [x! + x 2 ], and thus (16).^ 

17. C 3 [xi] k C 3 [x 2 ] -> C 3 [xi -x 2 ]. Suppose Ayp(17). By definition of C 3 , 
we have C^x^ and, since C 3 [x 2 ], we have C 2 [xi -x 2 ]. Now suppose C 2 [y]; we 
want to show C 2 [y • (x x -x 2 )]. We have C°[x 2 ], C ^], and C°[y] by (12), (7), 
and (3). Therefore 7[x 2 ], @{xi], and a[y], so that y • [x x • x 2 ) = (y • x x ) • x 2 . 
From C 3 [x!] we get C 2 [y • ij], and then from C 3 [x 2 ] we get C 2 [(y • Xi) • x 2 ], 
i.e. C 2 [y • (xi • x 2 )]. Thus C 2 [y] -+ C 2 [y • (x x • x 2 )], and thus (17). 

We have C 3 [x] -»• C[x] by (12), (7), and (3), so by (13), (14), (15), (16), 
and (17) we have established con (REL). □ 

Whenever we encounter an open formula of Q Q that is inductive in one 
of its variables, we can use REL to refine our concept of number and adjoin 
the formula as a new axiom, obtaining an open theory that is interpretable 
in Qq, and the process can be iterated. This observation is expressed in 
greater detail in the following two metatheorems. 

Metatheorem 6.2 Let T be an open extension of Qq with the same lan- 
guage, and let A be an open formula that is inductive in x in T. Then T[A] 
is interpretable in T. 

Demonstration. Let C be A/ x . Then C respects each function symbol 
(0, S, P, +, and •) of T, by REL. It respects all of the axioms of T because 
they are open, and it respects A because C 3 is stronger than A/ x , by REL. 
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Consequently, T[A] is interpretable in T via the interpretation associated 
with C 3 .^D 

Let Q be the formal system with the same language, formulas, and 
axioms as Q , but with an additional rule of inference (open induction): 

OI. If A is open and x occurs in A, infer A from ind* A. 

Metatheorem 6.3 Let Bi,...,Ba be theorems of Q . Then the theory 
Qo[&i, • • ■ , B A ] is interpretable in Q . 

Demonstration. Let B be Bi & • • • &: B A , so that B is a theorem of Q$. 
Let Ai, . . . , A^ be the open formulas occurring in the proof in Q of B that 
are inferred by OI, in the order of their occurrence, and let xi,...,x„ be 
the corresponding variables. Let Ti be Q [Ai], let T 2 be Q [Ai,A 2 ], . . 
and let T„ be Q [Ai, . . . , A u }. Then 

hg ind yil Ai, h Tl ind X2 A 2 , Kt^.j in^ A u . 

By Metatheorem 6.2 applied is times, T t is interpretable in Q , T 2 is inter- 
pretable in Ti, . . ., and T v is interpretable in T„_i. By the Interpretation 
Theorem of [Sh,§4.7], T u is interpretable in Q and, since Bi, . . . , B\ are 
theorems of T„, the theory Qo[Bi, . . . ,B\] is interpretable in Q . 

Metatheorem 6.4 Q\ is interpretable in Q. 

Demonstration. Q\ is an extension by definitions of Q 1? and Q is 
equivalent to an extension by definitions of Q, so it suffices to show that 
Qi is interpretable in Q Q . To do this it is enough, by Metatheorem 6.3, to 
prove (3.8)-(3.12) in Q - We do this now. 

We have (3.8) by (6.1), (6.2), and OI. We have (3.9) by (3.8), (6.5), 
(6.6), and OI. We have (3.10) by (3.8), (3.9), (6.7), (6.8), and OI. 

We claim that 1: 0+i = i..We have + = by (3.3). Suppose 
+ x = x. Then + Sx = S(0 + x) = Sx by (3.4), and thus + x = x -+ 
+ Sx - Sx. By OI we have (1). We claim that 2: Sy + x = S(y + x). 
We have Sy + = Sy = S{y + 0) by (3.3). Suppose Sy + x - S(y + x). 
Then Sx + Sy = S(Sy + x) = SS(y + x) = S(y + Sx) by (3.4), and thus 
(2) -* (2) x [Sx]. By OI we have (2). We claim that (3.11), namely x + y = 
y + x. We have x + = + xby (3.3) and (l). Suppose x + y = y + x. By 
(2) and (3.4) we obtain Sy + x = S(y + x) = S(x + y) = x + Sy, and thus 
(3.11) (3.1l)„[Sy]. By OI we have (3.11). 
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We claim that 3: O x = 0. We have = by (3.5). Suppose O x = 0. 
Then O Sx = x + = O x = by (3.6) and (3.3), and thus (3) -> (3) a [Sa;]. 
By 01 we have (3). We claim that 4: Sx • y = x • y + y. We have Sx • = 
by (3.5) and x-0 + = x-0 = 0by (3.3) and (3.5), so that Sx-0 = x-0 + 0. 
Suppose Sx • y = x • y + y. Then by (3.6), (3.8), (3.4), and (3.11) we obtain 
Sx • Sy = Sx ■ y + Sx = (x ■ y + y) + Sx = x • y + (y + Sx) = x • y + S(y + x) = 
x • y + S(x + y) = x ■ y + (x + Sy) = (x ■ y + x) + Sy = x • Sy + Sy. Thus 
(4) (4)„[Sy]. By OI we have (4). Finally, we claim that (3.12), namely 
x -y — y • x. We have • y = y ■ by (3) and (3.5). Suppose x • y = y • x. By 
(4) and (3.6), Sx-y = x-y + y = y-x + y = y-Sx. Thus (3.12) -»• C3.12) x [Sx]. 
By OI we have (3.12). 



Chapter 7 
Bounded induction 



In this chapter we define the notion of bounded formulas and show that 
induction can be used on them. 

The initial occurrence of 3x in a part 3xB of A is called manifestly 
bounded in case B is of the form x < a &: C where a is a term not contain- 
ing x. The formula A is called manifestly bounded in case each occurrence 
of an existential quantifier in A is manifestly bounded. (Recall that inside 
each universal quantifier there lurks an existential quantifier.) Formulas 
are built up from atomic formulas by means of -i, V, and existential quan- 
tifiers 3x (see [Sh,§2.4]). In the same way, manifestly bounded formulas are 
built up from atomic formulas by means of V, and manifestly bounded 
occurrences of existential quantifiers 3x. 

Metatheorem 7.1 Let T be a theory containing the binary predicate sym- 
bol < } and let C be a unary formula of an extension U of T that respects 
all function symbols of T and is hereditary. Let A be a manifestly bounded 
formula of T. Then 

hu C(/reeA) - (A <-> A c ). 

Demonstration. For the purposes of this demonstration, call a formula B 
good in case it is a formula of T and C(/reeB) -~+ (B +-* Be). Atomic 
formulas of T are good. Suppose B is good. Since C(/ree^B) is C(/reeB) 
and (-'Bjc is -i(Bc), the formula -<B is good. Thus 1: if B is good then ->B 
is good. Suppose Bi and B 2 are good. Since 
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C(free(B 1 VB 2 )) ->C(/reeB 1 ) & C(/reeB 2 ) 

is a tautology or the empty expression, and since (Bj vB 2 )c is Bic vB 2 c, we 
have that BiVB 2 is good. Thus 2: if B! and B 2 are good then Bj VB 2 is good. 
Suppose D is good and B is 3x(x < a D) and a does not contain x. Then 
every variable in a occurs free in B, and since C respects every function 
symbol of T we have hu C(free B) — ► C[a]. Since C is hereditary, 

hy C(/reeB) (3x(x < a & D) 3x(C[x] & x < a & D)). 

Since D is good and C(/reeB) & C[x] — ► C(/reeD) is a tautology (unless D 
is closed, in which case the question does not arise), 

hu C(free B) -f (3x(x < a & D) 3x(C[x] & x < a & D c )), 

which is C(/reeB) — ► (B *-> B c ). Thus 3: if D is good and a does not 
contain x then 3x(x < a & D) is good. Starting from the atomic formulas 
in A and applying- (l), (2), and (3) to each occurrence of V, or 3 in A, 
we find that A is good. 

Metatheorem 7.2 Let A be a manifestly bounded formula of Q[ that is 
inductive in one of its free variables x. Then Q\[A] is interpretable in Q\. 

Demonstration. Let C be A/ x . By REL, C 3 respects all function sym- 
bols and nonlogical axioms of Q\. Since C 5 is stronger than A/ x by REL, 
we have \-q> C 3 (free A) A. Since C 3 is hereditary by REL, C 3 respects A 
by Metatheorem 7.1. Therefore Q[[A] is interpretable in Q\ via the inter- 
pretation associated with C 3 . □ 

We construct a theory Q 2 , which is an extension of Q\ with the same 
language, by adjoining as new nonlogical axioms all formulas of the form 

MBI. A^O] & -ax (a; < y k -A^Sx]) -+ (x < y — ► A) 

where A is a manifestly bounded formula in the language of Q\ and y does 
not occur free in A. 

, Metatheorem 7. 3 Let Bi,...,B A be theorems of Q 2 . Then Q'^Bi, . . . , B A ] 
is interpretable in Q\. 

Demonstration. Each of the new nonlogical axioms (MBI) is manifestly 
bounded. We claim that each (MBI) is inductive in y in Q\. To see this, 
we argue in Q\ as follows. 
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Since x<0-*x = 0by (4.3), we have A x [0] -» (x < — ► A), 
and therefore (MBI) v [0). Suppose (MBI) & hyp (MBI) y [Syj. Observe that 
hyp(UBl) v \Sy} -+ hyp(MBX) since, by (4.4), x < y -► x < Sy. Therefore 
we have hyp (MBI), and since we have (MBI) we also have con (MBI), 
namely 1: x < y — ► A. We need to show that 2: x < Sy — *■ A. But by (4.4), 
x<Sy—>x<yVx = Sy. By (1) we have x < y -+ (2), so suppose x = Sy. 
Since hyp (MBI), we have — rewriting it in a more civilized notation — 

A x \0] & Vx(x < y k A A x [Sx]). 

But y < y by (4.2), so A x [y] — > A x [Sy]. Also because y < y, we have A z [y] 
by (1). Hence A x \Sy], i.e. A, and thus (2). Thus (MBI) (MBI)„[Sy], and 
therefore ind v (MBI). 

Since each (MBI) is manifestly bounded and inductive in y in Q[, the 
conjunction B of all axioms of the form (MBI) occurring in the proofs 
in Qi of Bi, . . . , Ba is also manifestly bounded and inductive in y in Q[. By 
Metatheorem 7.2, Q'i[B\ is interpretable in Q\. But Bi, . . . , B> are theorems 
of <2i[B], so by the Interpretation Theorem of [Sh,§4.7], QJ[Bi, . . . , B A ] is 
interpretable in Q\. □ 

We will say that a theory T' is locally interpretable in a theory T in case 
whenever B x , . . . ,Ba are theorems of T', then the theory whose nonlogical 
axioms are Bi, . . . ,B> (and whose nonlogical symbols are those occurring 
in Bi,...,Ba) is interpretable in T. By Metatheorems 7.3 and 6.4, the 
theory Q 2 is locally interpretable in Q. I promised in Chapter 3 that we 
would work only in theories interpretable in Q\ since only finitely many 
axioms of Q 2 will ever be used in this investigation, that promise will be 
kept so long as we work in Qi or extensions by definition of Q 2 . Moreover, 
Pudlak sketches a proof of the result that Q 2 is globally interpretable in Q 
(Theorem 2.7 of [Pu], attributed to A. Wilkie). It would be awkward 
always to write formulas in manifestly bounded form. For example, neither 
Vx(x < y — ► x < z) nor 3x3y(x < z y < z k, x ^ y) \s manifestly 
bounded, though they are respectively equivalent to the manifestly bounded 
formulas -^3x(x < y &; ->x < z) and 3x(x < z h 3y(y < z k, x ^ y)). We 
use 

A:xi < ai,...,x„ < a„ 

as an abbreviation for A +~» A', where A' is the formula obtained by replac- 
ing each part of A of the form 3x^B by 3x^(x^ < a^ & B), for all fi from 
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1 to v. Let T be a theory containing <, let A be a formula of T, and 
let Xj , . . . , x v be the variables that occur bound in A. We say that A is of 
bounded form (or of bounded form in T) in case there are terms ai, . . . , a„ 
such that for all fi from 1 to i/, the variable x M does not occur in a M , and 
h T A: Xi < ai, . . . ,Xj, < Then the formula A' defined as above is mani- 
festly bounded, and A is equivalent to A' in T. An extension T' of T is called 
a bounded extension of T in case it is an extension by definitions of T such 
that for each defining axiom pxi . . .x„ D of a predicate symbol, D is of 
bounded form, and for each defining axiom fx x . . . x v = y +-* D of a function 
symbol, 3yD is of bounded form. A nonlogical symbol, term, or formula 
of an extension U of T is called bounded over T in case it is a nonlogical 
symbol, term, or formula of bounded form of a bounded extension T' of T 
(such that U is an extension of T'). 

Let T be a theory containing <, 0, and S. We say that T is a bounded 
theory in case for every formula A of bounded form in T, Ht ind x A — * A. 

Metatheorem 7.4 Q2 is a bounded theory. 

Demonstration. Let A be a formula of bounded form in Q 2 , so that it 
is equivalent to the manifestly bounded formula A'. Then we argue in Q 2 
as follows. 

Suppose ina\ A'; that is, AJJO] Vx(A' -> A^Sxj). Then 

AjjO] & -.3x(x < y & A' & -A^Sx]). 

Here y is a variable distinct from x and all variables occurring in A'. 
By (MBI) we have x < y A'. Therefore x < x -> A', and so A' by (4.2). 
Thus ind K A' — » A', and so ind x A — ► A. 

Metatheorem 7.5 Let T be a bounded theory and let T' be a bounded 
extension of T. Then T' is a bounded theory. 

Demonstration. Suppose first that T' is obtained by adjoining a single 
symbol, and let A be a formula of bounded form in T\ Then the translation 
A* of A into T (see [Sh,§4.6]) is a formula of bounded form in T, so that 
hx ind^ A* — ► A*. But hf A* *-> A, and so hj' ind x A — ► A. Thus the 
result holds in this case. To obtain the result in general, apply this result 
step by step to each new nonlogical symbol. □ 

It might appear simpler to argue in the general case directly, by consid- 
ering the translation A* into T. But our metamathematical arguments are 
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intended to apply to actual formulas that one writes down. The metathe- 
orems are intended to be correct statements about what one can actually 
do, and the demonstrations are intended to show how to actually carry out 
the constructions they assert to exist. With even a rather modest exten- 
sion by definitions T' of T, if we try to construct the translation A* of a 
formula A of T' all the way into T, we may find ourselves in the plight 
of the legendary caliph who promised to give one grain of wheat for the 
first square of a chessboard and to double the number for each successive 
square. 

Metatheorem 7.6 Let U be an extension of Q 2 and let A be a formula 
of U that is bounded over Q2. Then 

BI. ind x A -* A 

is a theorem of U. 

Demonstration. By Metatheorems 7.4 and 7.5. □ 
We refer to BI as bounded induction. 

Metatheorem 7.7 Let T be a theory containing < and 0, let T' be a 
bounded extension of T, and let U be an extension of T*. Let C be a unary 
formula of V that is hereditary and respects each nonlogical axiom and 
function symbol of T. Then C respects each nonlogical axiom and function 
symbol of V. 

Demonstration. Suppose first that T' is obtained from T by adjoin- 
ing the new predicate symbol p with defining axiom pxi . . . x„ +-» D, where 
D is a formula of bounded form in T. Then D is equivalent to the mani- 
festly bounded formula D' of T; we may assume that D' contains no free 
variables other than Xi,...^^ for if it did, we could substitute for 
them. By Metatheorem 7.1, C respects pxi . ..x„ D 1 , and so C respects 
pxi . . . x„ «-+ D. Thus the result holds in this case. 

Suppose next that T' is obtained from T by adjoining the new function 
symbol f with defining axiom fx! . . . Xj, = y «-> D, where 3yD is a formula of 
bounded form in T. Then D is also a formula of bounded form in T, and so is 
equivalent to the manifestly bounded formula D' of T; we may assume that 
D' contains no free variables other than Xi, . . . ,x„,y. By Metatheorem 7,1, 
C respects fxi . . . x u = y «-+ D', and so C respects fxi . . .x*, = y +-+ D. Now 
3yD is equivalent to a formula 3y(y < a &; D ), where a is a term of T 
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not containing y; we may assume that a contains no variables other than 
Xi, . . . ,x„. By the uniqueness condition, 

fxj . . . x v — y <-* y < a & D . 

But since C respects each function symbol of T, we have 

NC[x 1 |-^---C[x,]-,C[a], 

and since C is hereditary it respects f. Thus the result holds in this case. 

To obtain the result in general, apply these results step by step to each 
new nonlogical symbol. 



Chapter 8 



The bounded least number 
principle 



The least number principle is a form of the induction principle that is 
useful in many proofs. Used indirectly, it is equivalent to proof by infinite 
descent or complete induction. Here we formulate a predicative version of 
the least number principle. 

For a formula A and variables xi, . . . ,x v , let yi, . . . ,y„ be in alphabetical 
order the first u variables not occurring in A and distinct from xi,...,x„; 
then we write 

min X| ... Xl ,A 

for 

A k, ->3y~i . . . 3y„(yi < Xi & - • • & y^ < x„ & 

(yi T^xi V ••• Vy„ ^x„) & A Xl ... Xw [yi...y |/ ]). 

Metatheorem 8.1 Let U be an extension of Q 2 and let A be a formula 
of U that is bounded over Q 2 - Then 

BLNP. 3x! • • • 3x„ A — ► 3xi ■ ■ • 3x„ min Xl ... x „ A 

is a theorem of U. 

Demonstration. Consider first the case that j/ is 1. We use the abbre- 
viations 
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a for 3xi(xx < z & A), 

ft for 3xj(xi < z & min Xl A), 

where z is a variable distinct from x^ and yj that does not occur in A. Then 
we argue in U as follows. We claim that 1: a — > /?. Suppose a z [0\. Then 
there exists X! such that Xi < &: A. By (4.3), Xi = and so min Xl A. Thus 
(l) z [0]. By (4.2) and (4.5) we have 2: -+ &[Sz]. Suppose a,[Sz], so that 
there exists x t such that Xj < Sz & A. By (4.4), Xi < z V Xi — Sz. We have 
x x < z — ► a. Suppose -a. Then x 2 = Sz. Suppose ^(min Xl A) Xl [Sz]. Then 
there exists yi such that y t < Sz & yi ^ Sz & A Xl [yi]. By (4.4), yi < z, so 
that a, a contradiction. Thus (min X] A) Xj [Sz]. By (4.2), Sz < Sz, and thus 
-a &[Sz]. Thus 3: a z [Sz] a V &[Sz]. By (2) and (3), 

{a^j3) & a z [Sz) -> A[Sz], 

so that (1) — ► (l) £ [Sz]. By BI we have (l). Consequently a B [xi] — ► &[xi], 
but since Xi < Xi by (4.2), we have 3xiA ~+ 3ximin Xl A. This proves the 
result when v is 1. 

Now consider the general case. Let zi,...,z„ be distinct, be distinct 
from Xi, . . . jX^yi, . . . ,y„, and not occur in A. We argue in U as follows. 
Suppose ftyp(BLNP). Then there exist z l5 . . . ,z„ such that A Xl ... Xl/ [zi . . . z„]. 
Write 

^ for Xi < Zi & • • • & x v < i u & A. 
By (4.2), 7 Xi ... x „[zi . . .z„]. By the result when i/ is 1, applied v times, 
there exists Xi such that min Xl dx2 ■ ■ • 3x„ 7, 
there exists x 2 such that min X2 3x3 ■ ■ * 3x„ 7, 



there exists x v such that min Xt , 7. 

Suppose ~>min Xl . Xt , A. Since 7, we have A, so there exist yi,...,y„ such 
that 
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yi < xi & • • • & y„ < x„ & (yi / xi V ■ ■ • V y„ x„) & 

A Xlj .., iX Jy 1 ,...,y l ,]. 

For some fi with 1 < /x < v we have t/^ / but this contradicts 
min X/t 3x M+1 ■ ■ ■ 3x^7. Thus min Xl , .. Xi/ A, and thus (BLNP). □ 

We will write M 3xi ■ • • Bx^A. By BLNP there exist minimal such xi, . . ., 
and x^" for "3x! • • • 3x„A. By BLNP there exist xi, . . ., and Xt, such that 
min Xl ... X „A" (with the appropriate change in grammar or punctuation when 
v is 1 or 2). 



Chapter 9 

The Euclidean algorithm 



Until further notice we will work in bounded extensions of Q 2 . At one 
point in the proof of REL we quoted five axioms to show that one times x 
equals x. This sort of thing might become tiresome if continued much 
longer, so let's stop doing it. The development picks up from where we left 
off at the end of Chapter 4, but now we have BI and BLNP available. 

9.1 Thm. zi + y = z 2 + y — ► z x - z 2 . 

Proof. Clearly (9.1)„[0j. Suppose (9.1) & z l + Sy = z 2 + Sy. Then 
2i + y — z 2 + y and so z\ — z 2 . Thus ind y (9.1), so by BI we have (9.1). 

9.2 Def. x — y = z^z4-y — x, otherwise z = 0. 

The uniqueness condition holds by (9.1). We have 3z rhs (9.2): z < x, 
so (9.2) is the defining axiom of a bounded function symbol. Put less 
formally, this function symbol is bounded because we do not need to search 
through all numbers to see whether there is a z with z + y — x, but only 
through all numbers < x. 

9.3 Thm. y^0kz-y^0-+z = 0. 

Proof. Suppose y^0foz-y = 0fcz^0. Then z = SPz, so SP z-y = 0, 
Pz ■ y + y = 0, and y = 0, which is a contradiction. Thus (9.3). 

9.4 Thm. y ^ & z\ • y — zz • y — ► Z\ — z 2 . 

Proof. Suppose 3zi3z 2 ~"{9A). By BLNP there exist minimal such z 1 
and z 2 . Of course, -»(9.4) — ► kyp(9A), so we have hyp(9A). By (9.3), 
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zi ^ and z 2 ^ 0. Hence SP^ • y = SPz 2 • y, P^i • y + y - Pz 2 • y + y, 
and Pziy = P2 2 ■ !/ by (9.1). By the minimality assumption, Pzj = Pz 2 . 
Therefore SPzi = SPz 2 and we have z 1 = z 2 , a contradiction. Thus (9.4). 

9.5 77im. y^0-»z<2-y. 

Proof. Suppose y ^ 0. Then z • y = 2 • SPy — z • Py + z, so 2 < z • y. 
Thus (9.5). 

9.6 Def. x/y = z^z-y = x& y^0, otherwise z — 0. 

The uniqueness condition holds by (9.4), and we have 3zrhs (9.6): z < x 
by (9.5). 

9.7 Thm. x < y V y < x. 

Proof. We have (9.7) x [0] since < y by (4.2). Suppose y < x. Then 
there exists z such that y + z = x, so y + Sz = Sx. Thus y < x —> y < Sx. 
By (4.2), y = x — * y < Sx, so suppose x < y h x ^ y. Then there exists z 
such that x + 2 = y & 2 ^ 0, so that x + SPz = y , Sx 4 Pz — y, and Sx < y. 
Thus ind x (9.7), so (9.7) by BI. 

9.8 Thm. x<y&y<x— >x = y. 

Proof. Suppose x < y & y < x. Then there exist iu and 2 such that 
x+iu = y& y + z = x. Hence x + (w + z) = x + 0, and u; -f z — by (9.1). 
Consequently w < 0, so w = and x = y. Thus (9.8). 

9.9 Def. Max(x.y) = z*-*(x<y&Lz = y)\/(y<x&iz = x}. 

The existence condition holds by (9.7), the uniqueness condition holds 
by (9.8) , and we have 3z rhs (9.9) : z < x + y. 

By the way, a nonlogical symbol beginning with a capita] letter will 
always be a function symbol (and conversely if the symbol begins w T ith a 
letter). 

9.10 Def. x<y<~*x<y&x/y. 

9.11 Thm. y ^ & x = y • q 1 + r x & r x < y & x = y • q 2 + r 2 & r 2 < y -» 
9! - 9 2 & r 2 = r 2 . 

Proof. Suppose hyp(9.1l) and suppose ^ < q 2 . There exists w such 
that q2 ~ qi ->r w &i w ^ 0. Then y ■ q\ + ri = x = y • gi + y • w; + r 2 , so 
rj = y ■ w -f r 2 . By (9.5), y < y • w < r u which contradicts ri < y by (9.8). 
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Thus ~^(qi < q 2 ), and similarly ~^(q 2 < <h), so that q x = g 2 by (9.7). By (9.1), 
r 1 = r i . Thus (9.11). 

9.12 Thru, y 7^ -+ 3g3r(x = t/-g + r& r<y). 

Proo/: We have (9.12): g < x,r < y. Since = y ■ + & (y ^ -+ 
< y), we have (9.12) x [0]. Suppose i = y- (/+r&r<y. There exists w 
such that r + ty = y& «;^0, so r + SPiu = y, Sr + Pu> = y, and Sr < y; 
that is, Sr < y V Sr = y. Then Sr < y — > Sx = y • 9 + r & Sr < y, and 
Sr = y -> Sx = y • Sg + & < y. Thus m4 (9.12), so (9.12) by BI. 

9.13 Def. Qt(y, x) = g ^ 3r(x = y • 9 + r & r < y) V (y = & g = 0). 

The uniqueness condition holds by (9.11), the existence condition holds 
by (9.12), and we have 3q rhs (9.13): q < x,r < y, and similarly for the next 
defining axiom. 

9.14 Def. Rm(y,x) = r ^ 3q{x = yg + r& r<y)v(y = 0& r = 0). 

9.15 Def. 1 = SO. 

9.16 Def. 2 - SI. 

9.17 Def. 3 = S2. 

9.18 Def. 4 = S3. 

9.19 Z)c/. 5 = S4. 

9.20 Dc/. 6 = S5. 

9.21 Def. 7 = S6. 

9.22 Def. 8 = S7. 

9.23 Z?c/. 9 = S8. 

9.24 £>e/. Dec(x,y) = x ■ S9 -+ y. 

The constants 0, 1, 2, 3, 4. 5, 6, 7, 8, and 9 are called decimal digits. If 
e x ,e2, . . . , e^-i^t/ are decimal digits, is at least 2, and ei is not 0, then we 
write eie 2 ... e^-ie,,, for Dec(Dec(. . . Dec(ei, e 2 ) . . . e„_i),e„). A term that 
is of this form or is a decimal digit is called a decimal. If e x and e 2 are 
decimal digits, one can find decimals a and b such that h e x + e 2 = a and 
h ej * e 2 — b. The two hundred theorems of this form can conveniently be 
tabulated as addition and multiplication tables; if decimals ei...e„ and 
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e[ . . .e'^ are given, these tables make it easy to find decimals c and d such 
that hei...e v + e' 1 ...ej 1 = c and h ei . . . e v • . . . e' = d. 

9.25 Def. x \ y <-> 3z x • z — y. 
We have rhs (9.25) : z < y. 

9.26 Thm. x\yky^0^x<y. 

Proof. Suppose hyp (9.26). There exists z such that x • z = y. Then 
z ^ 0, so x < y by (9.5). Thus (9.26). 

9.27 Thm. a = b + ck.x\ak.x\b^x\c. 

Proof. Suppose hyp (9.27). There exist u and v such that x ■ u = 
a &i x • v = b, so i ■ u = i • u + c. Suppose x — 0. Then c = = • and 
thus x = — > x | c. Suppose x ^ 0. Then v < u, so there exists w such 
that i; + w — u. Then x-v + x- w = x-u, so x • w — c by (9.1). Thus x | c 
and thus (9.27). 

9.28 Def. p is a prime 1 & Vx(x | p — ► x = 1 V i = p). 

We have p / rhs (9.28): x < p. Also, 2|0&2^1&2^0, so 
p = r/is (9.28): x < 2. Consequently we have rhs (9.28): x < Max(p, 2). 

We will frequently introduce predicate symbols containing words, but 
we use these predicate symbols formally. For example, u -i(0 is a prime)" is 
a theorem, but "0 is not a prime" is not even a formula. If *** is obtained 
by forming the plural of a noun in — , then we write (omitting the comma 
if v is 2) u a 1; . . and a„ are ***" for "ax is a — a„ is a — ". 

9.29 Thm. p is a prime & p j a • b — ► p \ a V p \ b. 

Proof. Suppose p is a prime & p | a ■ b &: ->(p | a). By (9.12) there 
exist q and r such that a — p- q + r & r < p. Also, < r since ~^(p | a). We 
have ab-p-q-b + r- 6, so p| r • 6 by (9.27). By BLNP there exists r 
such that min ro (0 < r < p & p | r • 6). There exist and rj such that 
P = r - q\ + Ti & r x < r. Since p • 6 = r • gj • 6 + n • b we have p | r l • b. 
By the minimality assumption, r\ ~ 0. Hence p = r ■ q\ and r | p. Since 
r < p and p is a prime, r = 1. Therefore p | 6, and thus (9.29). 



Chapter 10 
Encoding 



In the last chapter we copied the usual proofs, observing that only 
bounded inductions are involved. But now we come to a fork in the road. 
Arithmetic is too limited unless it can express notions such as finite sums 
and products, exponentiation, etc. The usual semi-formal treatment of such 
notions is based on a pun on the word "number", confounding the formal 
notion of number as a term of a theory with the genetic notion of number 
used in counting. For example, when one writes 

EfM = f(i) + --- + f(»), 

one is trying simultaneously to use n as a term of a theory and to speak of 
n terms of that theory. Godel overcame this difficulty by finding a way to 
represent recursive functions within Peano Arithmetic. The first require- 
ment is for a means of encoding a finite set of numbers by a single num- 
ber. Godel does this by means of his beta function (see [Go] or [Sh,§6.4]). 
This method is impredicative; in fact, it relies precisely on the induction 
giving 7r(n) discussed in the second example of Chapter 1. Mostowski, 
Robinson, and Tarski showed (see [MRT, pp. 56-59]) that recursive func- 
tions are representable in Q, but this does not meet our needs for two rea- 
sons: first, the methods are impredicative (theirs is a result about Q proved 
in a stronger theory) and second, recursive functions are represented only 
extensionally in Q, whereas we desire, where possible, an intensional repre- 
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sentation (see [Fe]) allowing us to prove properties of the functions within 
the theory. Therefore we will seek a different route. 

The encoding method that we will use is this: take a number a, write 
it in base four notation, and consider the set of all numbers whose base 
two representation occurs in the base four representation of a immediately 
preceded and followed by the base four digit 2; then we regard a as encoding 
this finite set of numbers. For example, the number a whose base four 
representation is 202112 (i.e., 2198 in decimal notation) encodes the pair 
of numbers whose base two representations are and 11 (i.e., and 3 in 
decimal notation). We need to show that this encoding can be expressed 
within our theory. This is not immediately clear; for example, one can 
speak of the first, second, or third binary digit of a number (counting from 
the right), but how can one speak of its fc th binary digit? We will get around 
this problem by speaking instead of the binary digit in the q's place, where q 
is a power of two. 

10.1 Def. q is a power of two <->• \/p(p is a prime & p \ q — > p = 2). 

We have q ^ -> rhs (10.1): p < q. Also, 3 is a prime & 3 | & 3 ^ 2, 
so that rhs (I0.l):p < Max(<?,3). 

10.2 Def. q is a power of four -<->■ q is a power of two & 3r r • r — q. 

We have rhs (10.2): r < q. Let us agree to stop giving bounds on for- 
mulas when they are obvious. 

10.3 Def. power(6,</) +-» (b — 2 &; q is a power of two) V (6 = 4 & q is a 
power of four). 

10.4 Thm. power(6,^i) h power(6, q 2 ) — ► powerft,^ • q 2 ). 

Proof. Suppose hyp(lOA), so that b = 2 V 6 = 4, and suppose p is a 
prime & p \ q\-q 2 - By (9.29), p | q\ Vp \ qt. But q\ arid q 2 are powers of two, 
so p — 2. Thus <?i • g 2 is a power of two, and therefore b — 2 — ► con (10.2). 
Suppose 6 = 4. Then there exist ri and r 2 such that r^-ri = q x & r 2 -r 2 = q%, 
so [r\ ■ r 2 ) ■ (rj • r 2 ) = qi ■ q 2 and thus 6 = 4—+ con (10.4). Thus (10.4). 

10.5 Thm. power(6, q) & q ^ 1 — ► power(6, q/b). 

Proof. Suppose hyp (10.5) and observe that ->(0 is a power of two), so 
that 1 < q & q \ q, so by BLNP there exists p such that min p (l < p & p | q). 
Suppose x | p. Then x \ q, so by the minimality of p we have x = 1 V x = p. 
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Thus p is a prime, and p | <?, so p = 2. That is, 2 | <?, so that q = (g/2) - 2. 
Suppose y is a prime & y | (#/2). Then y | q y so y — 2. Thus ^/2 is a 
* power of two, and consequently 6 = 2 — > con (10.5). Suppose 6 — 4. Then 
there exists r such that r ■ r = q. Since 2 is a prime and 2 | <j, we have 
2 | r by (9.29), so 4 • (r/2) ■ (r/2) = 9. Hence 4 | 9, and (r/2) • (r/2) = g/4. 
Suppose 2 is a prime &: z | (q/4). Then 2 | q, so 2 = 2. Thus g/4 is a 
power of four, and thus b = 4 — ► con (10.5). Thus (10.5). 

10.6 Thm. power(6,9i) & power(6, q 2 ) & q\ < g 2 — ► power(6, q 2 /q\). 

Proo/. Suppose 39i3g 2 ^(l0.6). By BLNP there exist minimal such 
qi and q 2 . Then q\ / 1. By (10.5), power(6, q\jb), so by the minimality 
assumption we have power(6, q 2 /(qi/b)}. That is, power(fc, [q 2 -b)lq\). Since 
<7i < we have (q 2 ■ b)/q Y / 1. By (10.5) again, power(6, {(q 2 ■ 6)/^)/6). 
That is, power(6, ^2/^1)5 which is a contradiction. Thus (10.6). 

10.7 Thm. power(6, qi) &: qi < x < q± - b & power(6, q 2 ) & q 2 < x < q 2 • b — > 
Q\ = Q 2 . 

Proof. Suppose hyp (10.7) Sz qi < q 2 . We have q 2 < q\ • b, so q 2 jq\ < b 
and ^(6 | (32/01))- By (10.5), q 2 /qi - 1, so q Y - q 2 . Thus < q 2 (10.7), 
and therefore q 2 < q x — > (10.7), so that (10.7). 

10.8 Z)c/. I j|t — q ^ power(6, 9) &x^0&Lq<x<q-b, otherwise 9 = 1. 

The formulas in what follows will be easier to read if we bear in mind 
that, for a base b and q a power of 6, the base 6 representation of x is 
that of Qt{q,x) down to and including the g's place, followed by that of 
Rm(<?, x). Using these scissors we can snip out any desired portion of the 
representation of x. For example, the base b digit in the <?'s place of x is 
Rm(6, Qt(<?, x)). It is intuitive that repeated snipping does not change the 
value of any digit (though perhaps its location may change), and the next 
theorem is a result of this sort. 

10.9 Thm. power (6, qi) & power(6, q 2 ) k qi < q 2 — ► Rm(6, Qt(q u x)) — 
Rm{b,Qt{q u Rm[q2,x))). 

Proof. Suppose hyp (10.9). We claim that 

1. x = Qt(q 2 ,x) ■ q 2 + Rm(? 2 ,z), 

2. Rm(g 2 ,x) = Qt(q u Rm(q 2 ,x)) • ?! + Rm((/i,Rm((/2,i)), 
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3. x = Qt(^,x) • gi + Rm{q u x), 

4. x = (Qt(g 2 ,x) ■ (q 2 /qi) + Qtfai, Rm(g 2 , 2;))) • ^ + Rmf^, Rm(g 2 , x)), 

5. Qt{q u x) = Qt(g 2 ,x) • (g 2 / 9l ) + Qt( 9l , Rm(</ 2 , x)). 

We have (1), (2), and (3) directly from the defining axioms for Qt and Rm, 
(4) is a consequence of (1) and (2), and (5) is a consequence of (3) and (4). 
But q 1 < q 2 , so 6 I {q 2 /q\) and (5) gives con (10.9). Thus (10.9). □ 

The next two theorems show that the first significant digit of x occurs 
in the |z|&'s place. 

10.10 Thm. power(&,g) & \x\ b < q -> Rm(6, Qt(q, x)) = 0. 

Proof. Suppose hyp (10.10). Then x < q, so Qt(q,x) — and therefore 
Rm(f>,Qt(?,x)) = 0. Thus (10.10). 

10.11 Thm. 1 / & (& = 2 V it = 4) < Rm(6, Qt(|x| fc , x)) = 
Qt(\x\ i ,x)<b. 

Proof. Suppose hyp (10.11). Then \x\ b < x < \x\ b ■ 6, so that we have 
< Qt(|x| 6 ,x) < b, and hence con (10.11). Thus (10.11). □ 

Next we show that two numbers with the same base b representation 
are equal. We do this by the method of infinite descent (predicatively), 
snipping off the first significant digit to get a pair of smaller numbers with 
the same base b representation. 

10.12 Thm. (6 = 2 V b = 4) & V?(power(6, q) Rm(6, Qt(q, x 2 )) = 
Rm(6,Qt(9!,x 2 ))) -» xi = x 2 . 

Proof. We have (10.12): q < Max(\xi\ bi \x 2 \ b ) by (10.10). Suppose 
3xi3x 2 ^(10.12). By BLNP there exist minimal such x x and x 2 . Suppose 
Xi = 0. Then Rm(6, Qt(|x 2 |i>, x 2 )) = 0, so x 2 — by (10.11). Hence Xi — x 2 , 
a contradiction, and thus X\ ^ 0. Similarly, x 2 ^ 0. By (10.10) and (10.11), 
\x\\b — \x2\b' Let q = \xi\ b , let y Y = Rm(g ,£i), and let y 2 = Rm(go,i 2 )- 
Then y x < x x and y 2 < x 2 , and 

xi = Qt(g ,^i) -9o + Vu 

x 2 = Qt(g ,^2) -qo + y 2 . 

We have Rm(6, Qt(q Q , xj)) = Rm(b,Qt(q ,x 2 )), so by (10.11) we obtain 
Qt(qo,Xi) = Qt(g i^2)- Since Xj / x 2 we have t/j ^ y 2 . We use the 
abbreviation 
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a for scop^ q (\0.\2) XlX2 [y x y 2 ]. 

By (10.10), qo < q a and by (10.9), q < q — > a. Therefore Vga, which 
contradicts the minimality assumption. Thus (10.12). □ 

The q ■ q's place in base four corresponds to the g's place in base two. 
Next we show that for any number x there is a number z whose base four 
representation is the same as the base two representation of x. 

10.13 Thm. 3ziq(q is a power of two — ► 
Rm(2,Qt(<?,x)) = Rm(4,Qtfa ■ q,z))). 

Proof. We have (10.13): z < |x| 2 • \x\ 2 • 4,g < |x| 2 by (10.10). Suppose 
32-1(10.13). By BLNP there exists a minimal such x. Suppose x = 
and let z — 0. Then (10.13), a contradiction, and thus x / 0. Let y = 
Rm(jx| 2 , x), so that y < x. By the minimality of x, there exists w such that 

Vq(q is a power of two -+ Rm(2, Qt(g, y}) — Rm(4, Qt((/ • q, w))). 

Let z = |x| 2 -|x| 2 + u>, and write a for scope^ q (10. 13). By (10.9), q < |x| 2 — ► cc 
and by (10.10), |x| 2 < q -» a. By (10.11) we have < Qt(|x[ 2 ,x) < 2, so 
Rm(2,Qt(|x| 2 ,x)) = 1. But Qt(|x| 2 ,y) = 0, so 

Rm(4,Qt(|x| 2 • |x| 2 ,ti;)) = Rm(2, Qt(|x| 2 , y)) = 0. 

Hence Rm(4,Qt(|x| 2 • |z| 2 ,z)) = 1, so that q — \x\ 2 — » a. Consequently 
Vga, and so (10.13), a contradiction. Thus (10.13). 

10.14 Def. Encx = z *-* \/q (q is a power of two — > Rm(2, Qt(g, x)) = 
Rm(4,Qt(g- 9 ^))). 

The uniqueness condition follows from (10.12), the existence condition 
is (10.13), and we have 3zrhs (10.14): z < |x| 2 ■ |x| 2 -4,g < |x| 2 . This is the 
function symbol that we need for encoding. 

10.15 Thm. Encxj = Enc x 2 — ► x x = x 2 . 
Proof. By (10.12). 

10.16 Def. enc(qi,q 2 ,x,a) <-> q x and q 2 are powers of four & 
Rm(4,Qt(^,a)) = Rm(4, Qt(g 2 , a)) = 2 k q 2 = 4 • |Enc x\ 4 • 4 • q Y & 
Rm( ft /(gi -4),Qt( 9l -4, a)) = Encx. 

10.17 Def. x 6 a *-> Bqi3q 2 enc(qi,q 2 ,x,a). 
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We have rhs (10.17): q 1 <a,q 2 < a. 

We need another scissors lemma, to verify that if two different numbers 
x and y are encoded in a, then they are encoded in a non-overlapping way. 
This is used to prove that if x is encoded in a, then there is a 6, smaller by 
at least a factor of 2, such that every other number encoded in a is encoded 
in b. 

10.18 Thm. power(6,</i) & power(i>, q) & power(6, q 2 ) & q\ < q < qi — > 
Rm(6,Qt( 9 / ?1 ,Rm(g 2 ,Qt( 9l ,o)))) = Rm(6,Qt(?,a)). 

Proo/. Suppose hyp (10.18). We claim that 

1. a - Qt(g l5 a) • q x + Rm($i,a), 

2. Qt(?!,a) = Qt(g 2) Qt(gi,a)) • qi + Rm(<? 2 , Qt^, a)), 

3. Qt( ff / 9l ,Qt( 9l ,o)) - Qt( ft ,Qt( 9l ,a)) • ((</ 2 ■ gi)/g) + 
Qt(^/gi , Rm(g 2 , Qt(gi, a))), 

4. Qt(g/^,Qt( ?1 ,a)) = Qt( 9 ,Qt( 9l ,a) ■ <h), 

5. Qt(g, Qt(gi, a) ■ qj = Qtfa, a), 

6. Qt{q 2 ,Qt{q u a))-{{q 2 -q 1 )/q) + Qt{q/q u Rm(q 2 ,Qt{q u a))) = Qt(g ls a). 

We have (l) and (2) directly. Since {q/qi) \ ? 2 , (3) follows from (2), and (4) 
is obvious. Since q\ < q and Rm(?i,a) < <h, (5) follows from (1). By (3), 
(4), and (5) we have (6). But b \ ((q 2 • qi)/q) since q < q 2 , so con (10.18). 
Thus (10.18). 

10.19 Thm. enc(q 1 ,q 2 ,x,a,) & enc(q 3 , q 4 , y, a) & j: ^ y -> 
9i < 92 < ?3 < <?4 v 93 < 94 < ?i < 92- 

Proof. Suppose hyp (10.19), and suppose (g = q^Vq = q 4 ) & q\ < q < q 2 . 
We have (q 2 /(qi • 4),Qt(qi • 4, a)) = Encx, so by (10.18) we obtain 

Rm(4,Qt(g/fai -4),Encx)) = Rm(4, Qt(?, a)) = 2. 

But since q/(qi • 4) is a power of four, there exists r such that r is a power 
of two and r ■ r = qj (q x ■ 4) , so 

Rm(4,Qt(g/(^-4),Encz)) =Rm(2,g(r,i)) < 2, 

a contradiction. Thus 
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1. -(gi < g 3 < q 2 ) & -(9i < 94 < 92), 
and similarly 

2- -(93 < 9i < 94) & ^(93 < 92 < 94). 

Suppose ^! = q 3 , so that g 3 < q 2 and g 2 < g 4 . By (1), q 2 < g 4 and by (2), 
q 2 = 9 4 . Consequently Enc x — Enc y and so x = y, a contradiction. Thus 
q x / g 3 . Suppose g! < g 3 , so that gi < g3 < 94- By (1) we have q 2 < qz, 
and thus qi < g 3 ~> con (10.19). Similarly, g 3 < gi — + con (10.19), and 
thus (10.19). 

10.20 Thm. x e a -+ 36(2 ■ 6 < a & Vy(y ^x&yGa-^yE 6)). 

Proof. Suppose x € a, so there exist ^ and q 2 such that enc(gi, g 2 , x, a). 
Let 6 = Qt(g 2 ,a) • gi • 4 + Rm(gi • 4, a). (That is, 6 is obtained from a by 
deleting Enc x.) Since q\ 4 4 < g 2 , Rm(gi-4,a) < gi-4, and Qt(g 2 ,a)-g 2 < a* 
we have 4 • 6 < 2 ■ a, so that 2 • 6 < a. Suppose l:y^x&yEa, 
so there exist g 3 and g 4 such that enc(g 3 , g 4 , y, a). By (10.19), g! < q 2 < 
qs < 9a v qs < 94 < 9i < 92- Suppose 2: q l < q 2 < qs < 94 ■ Then 
enc(g 3 /|Enc x| 4 , g 4 /[Enc x| 4 , y, 6), and thus (2) — » y G 6. Suppose 3: g 3 < 
94 < 9i < 92- Then enc(g 3 , g 4 , y, 6), and thus (3) — > y € b. Therefore y E 6, 
and thus (1) -> y G 6. Thus (10.20). 

10.21 TVim. x G a -> x < a. 

Proof. Suppose x £ a. Then Enc x < a. But = EncO, 1 = Enc 1, and 
2 < x — » x < |x| 2 • 2 < |x| 2 • |x| 2 = |Encx| 4 < Enc x, so x < Encx < a. 
Thus (10.21). 

10.22 Def. a is a set <-> -36(6 < a & Vx(x € a — > x E 6)). 



Chapter 11 

Bounded separation and 
minimum 



Let Q' 2 be the current theory; that is, the extension of Q 2 obtained by 
adjoining the defining axioms up to the present. 

Metatheorem 11.1 Let T be an extension of Q' 2 , let A be a bounded 
formula of T, and let x, y, and z be distinct variables such that z does not 
occur in A. Then 

BSD. {x 6 y : A} = z min z Vx(x £y&A^x£z) 

is the defining axiom of a bounded function symbol. (The variables in the 
term {x G y : A) are y and the variables distinct from x that occur free in 
A.) The following is a theorem of T[(BSD)]: 

BS. {x 6 y : A} is a set & {x e y : A} < y & 
(x e {x e y : A} x e y & A). 

Demonstration. The uniqueness condition for (BSD) holds by (9.8) and 
the definition of rain in Chapter 8. By (10.21), 

f- T Vx(x Gy & A— >x£z):x<y, 

and of course 
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h T BzVx(x £y&A— >x£z). 
Therefore, by BLNP we have the existence condition for (BSD), and 



Hence (BSD) is the defining axiom of a bounded function symbol. To 
prove (BS) in T[(BSD)], we argue as follows. 

We have {x £ y : A} is a set & {x E y : A} < y from the defining axioms 
(10.22) and (BSD). Let z = {x £ y : A}. Clearly 

1. xGy&A— *xEz. 

Suppose x£z&-i(x£y&;A). By (10.20) there exists z x such that 

zi < z &: Vxjfx! ^x&XiGz— ►XxE z x ). 

(Here Zi and Xi are distinct, and are distinct from x, y, z, and all variables 
occurring in A). Suppose Xi E y & A x [xi]. Then Xi ^ x, and xi £ z by (l), 
so xi 6 Zi. Thus 

Vx^xx £ y & Axlxj] -> X! £ zi), 

which contradicts the minimality of z. Thus (BS). □ 

Given a formula A and a variable x, let y be the first variable in alpha- 
betical order distinct from x and all variables in A. Then we write 

max x A for A & ^3y(x < y &; A x [y]). 

(We could also define max Xl Xi , A in the obvious way, but it does not seem 
likely that we would ever have occasion to use it.) 

Metaiheorem 11.2 Let T be an extension of Q' 2r let A be a formula of T, 
and let x, y, and z be distinct variables such that z does not occur in A. 



h T 3z rhs (BSD):z < y,x < y. 



Then 



MIND. Minx(x < y & A) = 
otherwise z = 0, 



z +~* min z (z < y & A x [z]), 



MAXD. Maxx(x < y & A) — 



z «-» max z (z < y & A x [z]), 



otherwise z — 
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are defining axioms of bounded function symbols. (The variables in these 
terms are y and all variables distinct from x that occur free in A.) The 
following are theorems of T[(MIND)] and T[(MAXD)] respectively: 

MIN. x < y & A — ► Minx(x < y & A) < x & A x [Minx(x < y & A)], 

MAX. x<y&A^x< Maxx(x < y & A) & A x [Maxx(x < y & A)). 

Demonstration. The uniqueness conditions hold by (9.7) and the defi- 
nitions of min and max. We have 

h T 3z rhs (MIND): z < y, 

and similarly for (MAXD), so these are defining axioms of bounded function 
symbols. 

To prove (MIN) in T[(MIND)] we argue as follows. Suppose x < y & A. 
By BLNP there exists z such that 

min a (z < y & A x [z]), 

so that Minx(x < y & A) = z. Then z < x & A x [z]. Thus (MIN). 

To prove (MAX) in T[(MAXD)] we argue as follows. Suppose x < y & A. 
Then y — x < y & A x [y — (y — x)j. By BLNP there exists z such that 

min z (z < y & A x [y - z]), 

so that y — z — Maxx(x < y &; A). By MIN, z < y — x & A x [y — z). Thus 
(MAX). □ 

Whenever a term of the form Minx(x < a & A), Maxx(x < a & A), or 
{x 6 a : A} occurs, it is understood that the corresponding defining axiom 
has been adjoined to the theory. 

If all occurrences of Minx in B are in the term Minx(x < a & A), we 
write 

scope MiTiX B for x < a &: A, 

and similarly with Minx replaced by Maxx. We sometimes omit x and 
write scope Min B. 



Chapter 12 

Sets and functions 



Although conceptually simple, the encoding procedure is laborious. In 
this chapter we will develop an elementary theory (in the mathematical 
sense of a collection of theorems) of certain finite sets of numbers, and 
afterwards we can hopefully forget the details of the encoding procedure. 

12.1 Thm. is a set & -.(x G 0), 

Proof. Clearly is a set. By (30.21), -.(x G 0). 

12.2 Thm. a and b are sets & Vx(x G a x G b) a = b. 
Proof. Suppose %>(12.2). Then a < b < a. Thus (12.2). 

12.3 Def. {x} = {y G 2 ■ |Enc x| 4 • 4 - 4 -f Enc x • 4 + 2 : y = x}. 

12.4 TVim. {x} is a set & (j/G {x} <-> y = x). 

Proof. By BS, {x} is a set & (j/ G {x} — > y = x). We have 

enc(l, |Enc x \ 4 ■ 4 • 4, x,2 • |Encx| 4 ■ 4 ■ 4 + Enc x ■ 4 + 2), 
so x G {x}. 

12.5 Def. a U 6 = {x G a ■ \b\ A ■ 4 + 6 : x G a V x G 6}. 

12.6 77im. a U b is a set &(xGaUfc^xGaVxG&). 

Proo/. By BS, a U 6 is a set & (x G a U 6 -> x G a V x G 6). Let 
c = a ■ |6| 4 -4 + 6. (We do not claim that c is a set.) Suppose x G a. 
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Then there exist qi and q 2 such that enc(<h,g 2 , x,a). Let qz — q\ • \b\ 4 ■ 4 
and let q 4 — q 2 • \b\ 4 • 4. Then enc(<7 3 ,g 4 ,x,c), so that x G c and x G a U 6. 
Thus :Go->i6oU6. Suppose x € b. There exist qi and q 2 such that 
enc(^i, g 2 , z,6), and we also have enc(qi,q 2 ,x,c). Thus iGi^iGoUi, 
and so (12.6). 

12.7 Def. aDb = {xea: xEb}. 

12.8 Def. a C 6 Vx(x 6 a x G b). 

12.9 77im. a is a set h a C 6 — »■ a < b. 

Proof. Suppose hyp(12.9). Then it follows from BS that we have a = 
{x e a : x € a] = {x £ b : x e a} < b. Thus (12.9). 

12.10 Def. <x,y) = (z+y) -(x + y) + y. 

Notice that the ordered pair (x,y) need not be a set, but it has the 
following crucial property: 

12.11 Thm. (x u yi) = <x 2 ,y 2 ) £i = x 2 & y x = y 2 . 

Proof. Suppose hyp( 12.11) and suppose Xi + yj < x 2 + y 2 . There exists z 
such that Xi + y x -4- 2 = x 2 + y 2 &: z ^ 0. Then 

{^2,y2> = (xi + yi + z) • (xi + yi + z) + y 2 = 

(x x + yj) • (x x + yi) + 2 • z ■ y x + 2 • z • x 1 + z - 2 + y 2 , 

so (xi,yi) < (x 2 ,y 2 ), a contradiction. Thus x 2 + y 2 < xi ■+ yi, and similarly 
^i + yi < ^2 + J/2, so that Xi + y 2 = x 2 + y 2 . By /iy/?(12.1l) and (9.1) we 
have y 1 — y 2 , and so x l = x 2 . Thus (12.11). 

12.12 77*m. x < (x,y> & y < (x,y>. 

Proof. Clearly y < (x,y). Also, x < x • x < (x, y). 

12.13 Z?e/. / is a function +-> / is a set & Vu;(it> G / -» 3x3y{x,y) = ti?) 
& VxVy 1 Vy 2 ((x,y 1 ) € f k (x,y 2 ) e f ~> y } = y 2 ). 

12.14 De/. /(x) = y <-> / is a function & (x,y) G /, otherwise y = 0. 

The uniqueness condition follows from (12.13). In addition, we have 
3yrhs (12.14): y < /, so (12.14) is the defining axiom of a bounded function 
symbol. Notice that it is a binary function symbol; f(x) is a term with two 
variables, / and x. 
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12.15 Def. x is in the domain of / +-» / is a function & 3y{x,y) € /. 

12.16 Def. y is in the range of / <-»■ / is a function & 3x (x,j/) 6 /. 

12.17 Thm. f and <j are functions & /(/) = g(j) & 

Vi(t is in the domain of / «-► t is in the domain of g «-» j < i < k) &, 
Vt(; < i < k k f(i) = g(i) - /(i + 1) = g(i + 1)) - / = g. 

Proof, Suppose Ayp(12.17). By (12.2) we need only establish that 
Vw(w € / +-+ w 6 g ) , so we need only show 1: Vi f(i) = g(i). Suppose -"(l). 
By BLNP there exists t such that min,/(t) ^ g(i). Clearly j < i < k. Since 
f(j) = g(j), we have t ^ j. Therefore j < i - 1 < k, and by the minimality 
of i we have f(t - 1) = g(i - 1). Hence /(t) = g(i), a contradiction, and 
thus (1). Thus (12.17). □ 

Let us try to construct bounded function symbols Dom and Ran to ex- 
press the domain and range of a function. It is intuitive from the encoding 
procedure that the domain or range of a function is smaller than the func- 
tion, but to establish this we need to refer to the details of the encoding 
procedure — let us hope for the last time. 

12.18 Thm. x < y Encx < Ency. 

Proof. Suppose 3x3y^(12.18). By BLNP there exist minimal such x and 
y. Clearly x ^ and y ^ 0. Let u = Rm(|x| 2 ,x) and let v — Rm(jy|2,y). 
By (10.11), Qt(|x| 2 ,x) = 1 = Qt(|y| 2 ,y), so x = |x| 2 + u and y = \y\ 2 -f r, 
where v < |x| 2 and v < \y\ 2 . We have Encx = |x| 2 • |x| 2 -t- Encu and 
Enc y — \y\ 2 • \y\ 2 + Enc v. Also, |x| 2 < \y\ 2 . Suppose |x| 2 < |yj 2 . Then 
Encx < Ency, a contradiction, and thus |x| 2 = |y| 2 . Consequently u < v. 
By the minimality assumption, Encu < Encv, so that Encx < Ency, a 
contradiction. Thus (12.18). 

12.19 Thm. f is a function & a is a set & 
VxVy(x eakytakx^y^ f{x) ^ f{y))& 
Vx(x € a -> x < f(x) & f(x) € 6) -> a < 6. 

Proof. Suppose 3a36^(12.19). By BLNP there exist minimal such a 
and b. Clearly a ^ 0, so 3x x £ a by (12.12). Let 

qi - Max ft (ft < b & 3q 2 3x(x 6o & Enc (ft, ft, /(x), 6))). 

By MAX there exist q 2 and x such that x € a & Enc (ft, q 2 , /(x), 6). Let 
oq = {$ € a : i 7^ x}. Then oq is a set and, by (10.22), ao < a- Let 6 = 
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Rm(qi -4,6). Then b < b. Suppose x E a G . Then x ^ x, so f(x Q ) ^ f{%)- 
Since /(x ) G b, there exist g 3 and ft such that enc(qr 3 , ft, /(x ), 6). By 
(10.19) and the definition of ft we have ft < ft < ft < ft. Consequently 
/(x ) G bo. Thus, by the minimality assumption, ao < 6 . Observe that 

2 • Enc f(x) j 4 ■ ft • 4 ■ 4 + Enc /(x) ■ ft • 4 • 6 < 

and let 

cii = 2 • |Enc x| 4 ■ ft • 4 • 4 + Enc x • ■ 4 -I- do- 
Since x < /(x) we have ai < b by (12.18). Since |ao|4 < ft we have 
enc(ft, [Enc xj 4 - ft - 4 • 4, x, a^), so that x G a Y . Also ao C a l7 so that a C 
Since a is a set we have a < a± by (12.9). Hence a < 6, a contradiction. 
Thus (12.19). □ 

This result is not useful at present because we have no replacement 
principle to produce functions. Function symbols are much easier to come 
by than functions. Let Q\ De tne current theory. 

Meiatheorem 12.1 Let T be an extension of Q" and let f be a bounded 
(1 + u)-ary function symbol of T. Then the following is a theorem of T: 

FS. a is a set &; 

VxVy(x Ga&j/Gfl&i/i/^ fxxj . . . x v ^ fyx^ . . . x„) & 
Vx(x G a — ► x < fxxj . . . x„ & fxxx . . . x„ G 6) — ► a < b. 

Demonstration. To obtain a proof of (FS), replace, in the proof of (12.19). 
each occurrence of (12.19) by (FS) and each occurrence of / (x) by fxX] . . . x v . 

12.20 Dtf. Graphfx,/) = <x,/(x)). 

12.21 Thm. a is a set &: Vx(x G a — * x is in the domain of /) — > a < f. 

Proof. We have x ^ y -* Graphfx,/) / Graphfy,/) by (12.11), and 
x < Graphfx, /) by (12.12), and x is in the domain of / — ► Graphfx, /) G /. 
Suppose /?.i/p(12.2J). By FS we have a < /. Thus (12.21). 

12.22 Def. Dom/ = Maxaja </ & a is a set & Vx(x G a —* x is in the 
domain of /)). 

12.23 Thm. x G Dom / «-> x is in the domain of /. 

Proof. Since scope MaX a(12.22) a [0], we have Ihs (12.23) r/is (12.23) by 
MAX. Suppose rhs (12.23) & -Ms (12.23), and let a = Dom/ U {x}. 
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Then a is a set and \fxi(x t E a —*■ x\ is in the domain of /), so a < f by 
(12.21). By the maximality of Dom / we have a < /, which is impossible 
since Dom / C a & Dom / / a. Thus (12.23). 

12.24 Def. Hparg(y,/) = {Mmx(x <fk f{x) = y),y). 

12.25 Thru, a is a set & Vy(y E a — » y is in the range of /) — * a < /, 

Proo/. We have y x ^ y 2 -» Hparg(y l5 /) ^ Hparg(y 2 ,/), and y < 
Hparg(y,/). Also, y is in the range of / — ► Hparg(y,/) € / by MIN. 
Suppose %>(12.25). By FS we have a < f. Thus (12.25). 

12.26 Def. Ran / = Maxa(o < / &: a is a set <fc Vy(y G a y is in the 
range off)). 

12.27 T/im. y £ Ran / <-> y is in the range of /. 

Proof. The proof is almost identical with that of (12.23). □ 
The notions of set and function are very useful, but we must take care 
not to use properties that have not been established. In particular, we do 
not have the set of all numbers < n, and we do not have power sets. 

The intuition that the set of all subsets of a finite set is finite — or more 
generally, that if A and B are finite sets, then so is the set B A of all 
functions from A to B — is a questionable intuition. Let A be the set of 
some 5000 spaces for symbols on a blank sheet of typewriter paper, and 
let B be the set of some 80 symbols of a typewriter; then perhaps B A is 
infinite. Perhaps it is even incorrect to think of B A as being a set. To do so 
is to postulate an entity, the set of all possible typewritten pages, and then 
to ascribe some kind of reality to this entity — for example, by asserting that 
one can in principle survey each possible typewritten page. But perhaps it 
simply is not so. Perhaps there is no such number as 80 5000 ; perhaps it is 
always possible to write a new and different page. Many ordinary activities 
are built up in a similar way from a rather small set of symbols or actions. 
Perhaps infinity is not far off in space or time or thought; perhaps it is while 
engaged in an ordinary activity — writing a page, getting a child ready for 
school, talking with someone, teaching a class, making love — that we are 
immersed in infinity. 



Chapter 13 
Exponential functions 



In this chapter we prove some familiar properties of exponentiation by 
assuming as given a function / that is exponentiation (i i— ► x 1 ) on the 
domain of all i < k. 

13.1 Def. exp(x,fc,/) <-+ / is a function & /(0) = 1 & Vt(t e Dom/ <-»■ 
i < k) & Vt(i < k f(i + 1) = x • /(t)). 

We have rhs[13.1):i < Max(/,fc). 

13.2 TVim. exp(x,fc,/) &; exp(x,fc,g) — ► / = g. 
Proof. By (12.17). 

13.3 Thm. exp(x, /:,/)& exp(y, A;, g) &; exp(x-y, fc, ft.) /i(/c) = /(/c)-g(A:). 

Proof. Suppose /iyp(l3.3). We will show that in fact 1: i < k — ► fc(t) = 
/(i) Suppose 3i-i(1). By BLNP there exists a minimal such i. Clearly 

i f 0. Therefore h(i - 1) = f(i - l) • g(i - 1), and so h{i) = f(i) ■ g(i), a 
contradiction. Thus (l), and thus (13.3). 

13.4 Thm. exp(x, &,/)&: exp(x, /, g) & exp(x, k + /, h) — * h{k + /) = f(k) • 

«(')■ 

Proof. Suppose Ayp(l3.4). We will show that 1: i < k — »• ft(i -M) = 
/(0'ff(0* Suppose Ek'-i(l). By BLNP there exists a minimal such i. Clearly 
i t£ 0. Therefore h(i - 1 + = /(« - 1) ■ $(/), and so /i^' + /) = f(i) • g(l), a 
contradiction. Thus (l), and thus (13.4). 
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13.5 Def. Rstr(/,i) ={«;€/: 3j3y{(j,y) = wkj< i)}. 

13.6 Thru, f is a function — ► Rstr(/,i) is a function & (j < i -* 
Rstr(/,0(j) = /(j)). 

Proo/. By BS. 

13.7 7%m. exp(x,fc,/) & » < A: -> exp(x, i, Rstr(/, t))- 
Proo/. By BS. 

13.8 Thm. exp(x,kj) k exp{f(k),l,g) k ex-p{x,k-l,h) h(k-l) = g(l). 

Proof. Suppose hyp(l3.S). We will show that 1: i < I — ► h(k • i) — g(i). 
Suppose 3i->(l). By BLNP there exists a minimal such i. Clearly i / 0. 
Therefore h(k ■ (i - 1)) = g(i - 1). By (13.7) and (13.4), 

Rstr(A, k ■ i)(k ■ i) = Rstr(/i,fc ■ (t - \))(k • (i - 1)) • Rstr(/i, k)[k), 

so by (13.6), h(k-i) = h(k-{i-l))>h(k). That is, h{k-i) = g(t-l) -/i(Jfc). But 
by (13.7) and (13.2), Rstr(/i,fc) = /, so by (13.6), h(k) = f(k). Therefore 
h(k • i) = - 1) • /(*). But $(i - 1) ■ f(k) = g{i), so h{k ■ i) = g{i), a 
contradiction. Thus (l), and thus (13.8). 

13.9 Thm. i^Ofc exp(z, Jfc, /) & t < -► /(t) / 0. 

Proof. Suppose Ek'-r(l3.9). By BLNP there exists a minimal such i. 
Clearly i ^ 0, so f{i - 1) / and /(j) / 0, a contradiction. Thus (13.9). 

13.10 Thm. 2<xk exp{x,kj) k i < j < k ~+ f(i) < f(j). 

Proof. Suppose 3j-i(13.10). By BLNP there exists a minimal such j. 
Clearly j ? 0, so f{i) < f{j - 1) V i = j - l, and hence f{i) < f{j - 1). 
But f(j - 1) / by (13.9), so f(i) < f{j - 1) < x • /(j - 1) = /(/), a 
contradiction. Thus (13.10). 

13.11 TTim. 2 < x k exp(x,k u fa) k exp(x,k 2 ,f 2 ) k f^ki) = f 2 (k 2 ) -» 
k\ = k 2 k fi- f 2 . 

Proof. Suppose hyp{13.ll) and suppose ki < k 2 . By (13.7) we have 
expfoAi.Rstrtfa,*!)), so by (13.2), Rstr(/ 2 ,*i) = By (13.6), / 2 (^) = 
/^A;,), but by (13.10), f 2 {ki) < f 2 {k 2 ). Hence f^kj < f 2 {k 2 ), a contra- 
diction, and thus k 2 < k\. Similarly, ki < k 2 , so that ki — k 2 . By (13.2), 
fi = f 2 . Thus (13.11). 
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13.12 Thm. exp(2,fc,/) & i < k — + f(i) is a power of two. 

Proof. Suppose 3i^(13.12). By BLNP there exists a minimal such i. 
Clearly % ^ 0, so f(i — 1) is a power of two and hence /(«") is a power of 
two, a contradiction. Thus (13.12). 

13.13 Thm. exp(2,Jfc,/) & x < f(k) ~* 31(1 <kk \x\ 2 = /(/))• 

Proof. Suppose /it/p(13.13) and suppose x < 1. Then |x| 2 = 1 — /(0), 
and thus x < 1 — ► con (13.13). Suppose 2 < x. Then |x| 2 < x, so |x| 2 < 
f(k). By BLNP there exists / such that min ; |x| 2 < /(/). But |x| 2 ^ 1, so 
/ / and hence /(/ - 1) < |x| 2 < /(/) = 2 ■ /(/ - l). By (13.12), /(/ - 1) 
and |x| 2 are powers of two, so by (10.6) we obtain 1 < |x| 2 //(/ — 1) < 2. 
Hence |x| 2 = /(/). Thus con (13.13), and thus (13.13). 

13.14 Thm. exp(x, A;,/) & exp(y, k, g) k, x < y — ► f(k) < g{k). 

Proof. Suppose 3A;3/3ff->(13.14). By BLNP there exist minimal such k, 
/, and g. Clearly k ^ 0. Let / x = Rstr(/,A:- 1) and let g Y = Rstr(g,fc- 1). 
By the minimality assumption, fi(k — 1) < g x (k — l). Therefore f(k) < g(k), 
a contradiction. Thus (13.14). 



Chapter 14 
Exponentiation 



Let Q'" be the current theory. Notice: in this chapter we will work in 
unbounded extensions of Q' 2 ". (When I say that something is unbounded, 
I mean merely that I do not claim that it is bounded.) We mark with "!" 
the defining axiom of any unbounded symbol. The serves as a warning 
that we may not use BI (or BLNP, BSD, BS, MIND, MIN, MAXD, MAX, 
or FS) on formulas containing the symbol. 

14.1 Def! e(k) *-> Vx3/exp(z, k, /). 

14.2 Thm. ind k e(k). 

Proof. We have \fx exp(x, 0, {(0, 1)}) and so e(0). Suppose exp(x,k, f) 
and let g = / U {{Sk,x ■ f(k))}. Then exp(:r, Sfc, and thus (14.2). □ 

Recall from Chapter 5 the abbreviations C 1 , C 2 , and C 3 , where C is a 
unary formula. If p is a unary predicate, we write p*(a) for p( A:) 1 [a] , p 2 (a) 
for p(fc) 2 [a], and p 3 (a) for p(fc) 3 [a]. 

14.3 Thm. (e 3 {k) e(k)) &; (e 3 (k) & i < k -> e 3 {i)) & £ 3 (0) & 
{e 3 {k) -> E z {Sk)) & (<r 3 (fc) & e s {1) - e z {k + s 3 {k ■ I)). 

Proof. By (14.2) and REL. 

14.4 Def! x ] k = z <-> e z [k) h 3f(exp{x,kJ) k f(k) = z), otherwise 

The uniqueness condition holds by (13.2). It is convenient to have a 
symbol f for exponentiation, but we also use the abbreviation a b for a | b. 
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Let us use semantics to discuss the picture of the number system that 
is emerging. The discussion will be informal; we will not distinguish be- 
tween a model and its universe, or between individuals and their names (see 
[Sh,§2.5]). Let T be the theory whose nonlogical axioms are (3.l)-(l4.4) to- 
gether with all formulas of the form (BSD), (MIND), and (MAXD) tacitly 
used in these formulas (but not the axiom scheme (MBI)), and whose non- 
logical symbols are those occurring in these formulas. Let M be a model 
of T. For u a nonlogical symbol of T, let us also denote the corresponding 
predicate or function of M by u. Let C be an inductive formula of T and 
let M c = {^M:C 3 [(]}, This becomes a model of T if we make the fol- 
lowing definitions. Each nonlogical predicate symbol p of T is introduced 
in an axiom of the form px! . . . Xj, D; for £1, . . . , f„ in M c , we say that 
Pc(fi, ■ • • , Ci/) holds in case D 03 ^, ...,£„] holds. The set M c contains 
and is closed under S, P, +, and *. Every other function symbol f of T is 
introduced in an axiom of the form fx! . . . x v = y D; for £i, . . . , in M c 
we let fc(£i, • ■ • , £v) be that element r? of M c such that D° . . . , £„, rj] 
holds. Now for p a bounded predicate symbol (i.e., for p a predicate symbol 
other than e), p c is simply the restriction of p to Mc, and for f a bounded 
function symbol (i.e., for f a function symbol other than j), is simply 
the restriction of f to Mc. A bounded predicate symbol does not change 
its meaning; a bounded function symbol does not change its values. It is 
different for e and j. Suppose we have an individual k in Mc such that 
s(k) holds. Then for all £ in M, and so certainly for all f in M c , there is 
a <j> such that exp(£, «;,</>) holds — but nothing guarantees that <f> 6 Mc even 
when £ and /c are in Mc- But cc(k) holds only if 4> E M c , so that e(k) 
and ec{k) may mean different things. Similarly, for £ and k, in M c we may 
have £ j" /c = f with £ £ M c . In this case £ | c /c = 0, so that £ T /c ana " 
£ tc k may have different values. 

Now if the inductive formula C is bounded, then C holds in the model 
Mc; this is the method we have been using to successively refine our concept 
of number. Each time we perform a bounded induction the model becomes 
smaller, and closer to our intuitive idea of what the number system should 
be. But for an unbounded C this need not be so. For example, consider 
the inductive formula e(k), which we call e for short, and form M £ . We 
have s(k) for all /c in M £ , but this does not mean that we have a model of 
T[VA; e[k)]. We can iterate this process: introduce erx,^,... by 
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El {k) <- Vx(e 3 (x) - 3f(e*(f) k exp(s,*,/))), 
e 2 (k) <- Vx(e?(x) 3/(eJ(/) & exp(x, *,/))), 

In this way we obtain successively smaller models, 
M3M { DM £] D..OM Sr 3... 

but none of these relativizations helps one whit to establish Vfce(/:). 

Semantics tells us that there is an intersection M £w of these models and 
that M Cw is closed under exponentiation. This seems to be beyond the reach 
of syntax, as is the minimal model N. The minimal model is a model of /, 
since for any inductive C we have Nc C N and so N c = N. This N is the 
legendary standard model of Peano Arithmetic. But how can we express 
what membership in N means? The concept of the finite in mathematics 
is subtle and elusive. 

Semantics is a picturesque metaphor to illustrate syntax, but like all 
metaphors it depicts more than may have been intended. A nominalist 
distrusts semantical reasoning that involves syntactically inexpressible con- 
cepts. 

14.5 Thm. e s {k) & e 3 {1) - (x-y) k = x k -y k & x k+l = x k • x l k x kl - (x k ) 1 . 
Proof. By (14.3), (13.3), (13.4), and (13.8). 

14.6 Def! x is a power of b +^ 3k(s 3 (k) & b k = x). 

14.7 Thm. x is a power of 2 — > x is a power of two. 

Proof. Suppose x is a power of 2. Then there exist k and / such that 
exp(2,fc,/) & f(k) = x. By (13.12), x is a power of two. Thus (14.7). □ 

What about the converse to (14.7) — can we show that 1: x is a power of 
two — > x is a power of 2? If x is a power of two, we want a k such that 2 k = x. 
This k will be much smaller than x, so this does not seem too much to ask. 
But we cannot use BLNP to prove (1) because 2 k — x is an unbounded 
formula. This suggests, not that there is an arithmetical obstacle, but 
that our formalism is inadequate. The problem of establishing (l) is a 
test problem; the motivation for attacking it is to obtain more powerful 
methods. The difficulty is that the objects used to express the relationship 
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2 k = x, in particular the function / such that exp(2,fc, /) & f(k) = x, are 
big. We can obtain a bound on / of the form 2 C '* '*, where C is a constant, 
but this cannot be polynomially bounded in terms of x (that is, 2 k ). Let 
us try to go beyond polynomials and use the function # that on powers 
of 2 satisfies 2 k # 2 l = 2 kl . Then powers of 2 behave with respect to 1, 
multiplication by 2, •, and # like numbers with respect to 0, S, +, and •, 
so we should be able to adapt the relativization scheme of Chapter 5 to 
include #. 

14.8 Def! A(x) <-> 3k x < 2 k . 

We would hope to establish that \(x) holds universally, but let us first 
investigate the universe of numbers x that do satisfy \{x). 

14.9 Thm. A(0) & (A(x) -» A(Sx) & A(Px)) & (A(x) & A(y) A(x + y) 
&: A(x • y)) k. (A(x) & u; < x — * A(u>)). 

Proof. Clearly A(0). Suppose x < 2 k & y < 2 l & w < x. Then 
Px < Sx < 2* +1 , so A(Px) and A(Sx). We have x + t/ < 2 t (Max(fc,i) + 1), 
so A(x -f y). We have x • y < 2 k+l , so A(x • y). Finally, A(u/) is obvious. 
Thus (14.9). 

14.10 Def! Log x = k «-> |x| 2 = 2*, otherwise k — 0. 
The uniqueness condition holds by (13.11). 

14.11 Thm. s 3 (Log x). 

Proof. We have Log x = — > (14.11) since £ 3 (0), so suppose Log i/0. 
Since |x| 2 / Owe have £ 3 (Log x) from (14.4), and thus (14.11). 

14.12 Thm. A(2*). 
Proof. From (14.8). 

14.13 Thm. A(x) -> |x| 2 = 2 Log " 1 = 2 Log "W 2 . 

Proof. Suppose A(x). Then there exist k and / such that £ z [k) h 
exp(2,fc,/) & x < f(k). By (13.13) there exists / such that I < k & 
\ x \ 2 = /(/). We have £ 3 {l). Also, exp(2, /, Rstr(/,/)) and Rstr(/,/)(/) - 
/(/) = |x| 2 , so that |x| 2 = 2 l and / = Log x = Log |x| 2 . Thus (14.13). 

14.14 Def! x# y = 2 Log0 * Logot '. 
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14.15 Thm. A(x# y). 
Proof. By (14.12). 

14.16 Thm. x# y = |x# y| 2 = \x\ 2 #o |y| 2 = \x\ 2 #oy = x # \y\ 2 . 
Proof. We have 

x #o y = 2 T (Logo * • Log y) = 

2 t (Logo \x\ 2 • Logo \y\ 2 ) = \x\ 2 #o |2/U- 

By (14.11) and (14.3) we have e 3 (Log x -Log y), so by (14.7), x# y is a 
power of two. Hence x# y = |z#oy| 2 - Since | |x| 2 1 2 = |x| 2 we have (14.16). 

14.17 Thm. x# l = 1. 

Proof. We have x# 1 = 2 T (Log x ■ Log 1) = 2 T = 1. 

14.18 Thm. A(x) x# 2 = jx| 2 . 

Proo/. We have x # 2 = 2 | (Logo x • Logo 2) = 2 | Logo z, so by (14.13) 
we have (14.18). 

14.19 Thm. x#oy — y# x. 

Proof. We have x # y = 2 | (Log x • Log y) = 2 | (Log y - Log x) = 

y#o^- 

14.20 Thm. Log (x# y) = Log x-Log y. 

Froo/. By (14.16), |x # y| 2 = x # y = 2 T (Log x • Log y), so (14.20). 

14.21 TTmi. (x# y)#o2 = x#o(y#o^). 

Proo/. By (14.20) we get (x # y) # 2 - 2 | (Logo #0 y) ■ Log z) = 
2 | (Logo x ■ Logo y • Logo 2) = 2 T (Logo z ■ Logo (y #0 2)) = x # (y #0 z). 

14.22 77im. A(y) & A(z) x # (|y| 2 • \z\ 2 ) = (x #0 \y\ 2 ) ■ (x # |*| 2 ). 

Proo/. Suppose A(y) & A(z). By (14.13), |y| 2 = 2 | Logo ]y| 2 and 
|z| 2 = 2 | Logo \z\ 2 , so that |y| 2 • \z\ 2 = 2 | (Logo ]y| 2 + Logo |^| 2 ) and so 
Log (I2/I2 • \z\ 2 ) = Logo |yb + Log \z\ 2 . Hence 

* #0 (|y| 2 • \z\ 2 ) = 2 t (Logo X ■ (Logo |y| 2 + Logo \z\ 2 )) = 
(2 t (Log x • Logo |y| 2 )) • (2 | (Logo 2 • Log \z\ 2 )) = 
(^#o|y| 2 ) • (X# |2| 2 ). 
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Thus (14.22). 

14.23 Tkm. \{z)^ (y < z -> x # y < x # 

Proof. Suppose \(z) & y < z. Then A(y), and by (14.13) and (13.10) 
we have Logo y < Logo z. By (13.10) again, x # y = 2 | (Logo z • Logo t/) < 
2 t (Logo x • Logo z) = x # 2. Thus (14.23) . 



Chapter 15 

A stronger relativization 
scheme 

We concluded Chapter 14 by proving some properties of # , but some 
of these held only conditionally, subject to A(x) for certain x. What we can't 
prove, we can postulate. Let Q 3 be the theory obtained from (this is 
the bounded extension of Q 2 defined at the beginning of Chapter 14) by 
adjoining a binary function symbol # and the following nonlogical axioms: 

15.1 Ax. x#y = jx#y| 2 = \x\i # \y\z = W2 # 2/ = z# |y I2, 

15.2 Ax. x# 1 = 1, 

15.3 Ax. x#2 = 2, 

15.4 Ax. x#y = 

15.5 Ax. (x#y)#z = x#{y#z), 

15.6 Ax. x#(|y| 2 -|2| 2 ) = (*#|y| 2 )-(x#|*| 2 ), 

15.7 Ax. y<2 -+ x#y < x# z. 
Metatheorem 15.1 Q z is interpretable in Q 2 . 

Demonstration. Let T be the (unbounded) extension by definitions of Q 2 
obtained by adjoining all of the symbols and defining axioms through the 
end of Chapter 14. We construct an interpretation I of Q3 in T. Let the 
universe of I be A. For each nonlogical symbol u of Q 3 other than # , let uj 
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be u, and let # i be # . By (14.9), A is hereditary and respects 0, S, P, +, 
and •. Also, A respects each nonlogical axiom of Q 2 : the nonlogical axioms 
of Q\ because they are open, the defining axiom of < because A is hered- 
itary, and the axioms (MBI) by Metatheorem 7.1. By Metatheorem 7.7, 
A respects each nonlogical axiom and function symbol of Q"'. By (14.15) 
we have Ht A(x) k A(y) — »• A(x #iy). The interpretations of the axioms 
(15.1)-(15.7) are theorems of T by (14.16)-(14.19) and (14.21)-(14.23). □ 
If C is a unary formula, we write 

C 4 for Vy(C 3 [y]^C 3 [y#x]). 

Metatheorem 15.2 Let T be an extension of Q 3 and let C be a unary 
formula of T. Then the following is a theorem of T: 

SREL. C[0] k Vx(C[x] -+ C{Sx\) -> 
(C 4 [x] -> C[x]) k 
(C 4 [xj k w < x -> C 4 [w\) k 

c 4 [o] k 

(C 4 [x] C 4 [Sx] k C 4 [Px]) k 

(C 4 !^] k C 4 [x 2 ] - C 4 [x! + x 2 ] k C 4 [x! -x 2 ] k C 4 [x 1 #x 2j 1 ). 

Demonstration. We prove (SREL) in T as follows. Suppose /iyp(SREL). 
Suppose C 4 [x]. We have C 3 [2] by REL, and consequently C 3 [2#x]. By 
(15.4) and (15.3), 2 # x = |x| 2 , and so C 3 [|x| 2 ]. But x < |x| 2 • x, so by REL, 
C 3 [x] and hence C[x]. Thus C 4 [x] -> C[x]. Suppose C 4 [x] k w < x k C 3 [y]. 
Then C 3 [y#x]. But y # w < y # x by (15.7), so C 3 [y#^j by REL. Thus 
C 4 [x] k w < x C 4 [u;]. By (15.1) and (15.2), y#0 = y # l0| 2 = y#l = 1, 
and C^l] by REL. Hence C 4 [0]. Let a = |xi| 2 -2- |x 2 | 2 -2. Since Sx! < \x x \ t -2 
we have Sxi < a, Pxj < a, and X\ • x 2 < a; and since x x + x 2 < Xj • 2 V 
Xi + x 2 < x 2 ■ 2 we also have x x + x 2 < a. Suppose C 4 [xi] k C 4 [x 2 ] k C 3 [y]. 
Now 

y # a = (y # ^ | 2 ) - (y # 2) ■ (y # |x 2 1 2 ) - (y # 2) = 

(y # *i) • |y| 2 • (y # * 2 ) • |y| 2 < (y # *i) • SPy • (y # * 2 ) • spy 

by (15.6), (15.1), and (15.2). But we have C^y^x^and C 3 [y # x 2 ], so by 
REL we C 3 [y#a]. By (15.7) and REL we have C 3 [y#Sxi], C 3 [y#Px!], 
C s [y # (xi+x 2 )], and C 3 [y# (xi*^)]. Finally, we have C 3 [y # X\\ and hence 
C 3 [(y # x x ) # x 2 ], so we have C 3 [y # (x! # x 2 )] by (15.5). Thus om(SREL), 
and thus (SREL). □ 
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This relativization scheme is also due to Solovay; see [PD] and [PuJ. 

Metatheorem 15. 8 Let A be a manifestly bounded formula of Q$ that is 
inductive in one of its free variables x. Then Qz[A] is interpretable in Q$. 

Demonstration. Let C be A/ x . By SREL, C 4 is hereditary and respects 
0, S, P, +, and Also, C 4 respects each nonlogical axiom of Q 2 : the 
nonlogical axioms of Q 1 because they are open, the defining axiom of < 
because C 4 is hereditary, and the axioms (MBI) by Metatheorem 7.1. By 
Metatheorem 7.7, C 4 respects each nonlogical axiom and function symbol 
of Q' 2 ". By SREL, C 4 respects #, and it respects (15.1) (15.7) because they 
are open. Finally, C 4 respects A by Metatheorem 7.1. Therefore Qz[A\ is 
interpretable in Q 3 via the interpretation associated with C 4 . □ 

We construct a theory Q 4 , which is an extension of Q 3 with the same lan- 
guage, by adjoining as new nonlogical axioms all formulas of the form (MBI) 
(see Chapter 7) where now A is a manifestly bounded formula in the lan- 
guage of Q 3 . 

Metatheorem 15.4 Let Bi,...,B^ be theorems of Q 4 . Then the theory 
Qz[Bi, . . . , B A ] is interpretable in Q%. 

Demonstration. In the demonstration of Metatheorem 7.3, replace each 
occurrence of Q 2 by Q 4 , each occurrence of Q\ by Q z , and the reference to 
Metatheorem 7.2 by a reference to Metatheorem 15.3. 

Metatheorem 15.5 Q 4 is a bounded theory. 

Demonstration. In the demonstration of Metatheorem 7.4, replace each 
occurrence of Q 2 by Q 4 . 

Metatheorem 15.6 Let U be an extension of Q 4 and let A be a formula 
of U that is bounded over Q 4 . Then 

BI. ind x A — ► A 

is a theorem of U. 

Demonstration. By Metatheorems 15.5 and 7.5. □ 

Until possible further notice, when we say that a formula, nonlogical 
symbol, or term is bounded, we mean that it is bounded over Q 4 . We have 
BLNP (Chap. 8), BSD, BS, MIND, MIN, MAXD, MAX (Chap. 11), and FS 
(Chap. 12) for bounded formulas. We will work in extensions by definition 
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of Q4, marking with each defining axiom of an unbounded symbol. To 
start with, we adjoin the symbols and defining axioms of Chapter 14. 

Putting all of our interpretability results together, and using the fact 
that an extension by definitions of a theory containing a constant is inter- 
pretable in it (see [Sh,§4.7]), we see that any extension by definitions of Q 4 
is locally interpretable in Q. 

Why could we not have settled at the beginning on a theory, called 
Predicative Arithmetic, with all of the necessary axioms? We would like 
to have a formula A in the language of Q be a theorem of Predicative 
Arithmetic if and only if Q\A\ is interpretable in Q. Perhaps this is possible, 
but I do not know the answer to the following compatibility problem: if Q[A] 
and Q[B] are interpretable in Q, then is Q[A,B] interpretable in Q? In the 
absence of a positive solution to the compatibility problem, it is necessary 
to take care, as we have, that our methods for adding a formula to the 
growing list of predicatively established formulas do not interfere with any 
previously established formula. 



Chapter 16 

Bounds on exponential 
functions 

Now we take up the question of how big / is when exp(x,A;,/) holds. 

16.1 Thru, {x} < 146- (SPx) 2 . 

Proof. From the defining axioms of the function symbols involved, we 
find that |x| 2 < SPx and Encx < SPx • SPx • 4, and so we have {x} < 
2 • (SPx ■ SPx • 4) • 4 ■ 4 + (SPx ■ SPx ■ 4) ■ 4 + 2 < 146 • (SPx) 2 . 

16.2 Thru, a U b < 5 • SPa • SP6. 

Proof. We have a U b < a • SP6 • 4 + 6 < 5 • SPa ■ SP6. 

16.3 Thru. (x,y) < 5 • (Max(x, y}) 2 . 

Proof. We have (x, y) = (x + y) 2 + y < 4 • (Max(x, y)) 2 + y 2 < 
5-(Max(x,y)) 2 . 

16.4 L>e/. K = 18250. 

16.5 77im. fu{{x,y)} < K • SP/ • (SP Max(x, y)) 4 . 
Proof. By (16.1), (16.2), and (16.3). 

16.6 Thm. 2 < x & exp(x,fc, f)&i<k-^i< f{i). 

Proof. Suppose 3^(16.6). By BLNP there exists a minimal such i. 
Clearly i ^ 0. Therefore i - 1 < f(i - 1), and f(i - l) ^ by (13.9), so 
* < s ■ /(& — 1) = /(«)> a contradiction. Thus (16.6). 
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16.7 Thm. 2 < x & exp(x, k, f) —> / < K - Rstr(/, k - 1) ■ /(fc) 4 . 

Proof. Suppose hyp(l6J). Then / = Rstr(/,A: - 1) U {(*,/(*))}, so 
core (16.7) by (16.5), (16.6), and (13.9). Thus (16.7). 

16.8 Thm. a # (2 • b) = |a| 2 ■ (a # 6). 

Proo/. We have a # (2 ■ 5) - a # |2 ■ 6| 2 = a # (2 • |6| 2 ) - (a # 2) ■ 
(a#|6| 2 ) = |o| 2 -(a#6). 

16.9 Def. x > y ^ y < x. 

16.10 77im. 2 < ^ K • z 4 < K # (2 • z). 

Proof. Suppose 2 < z. Observe that 2 9 = 512 < K. Then K # (2 • z) = 
|K| 2 • (K#z) > |K| 2 ■ (2 9 #z) = |K| 2 • \z\\ = |K| 2 ■ |*| 2 • (k|^) 4 > K ■ z\ 
Thus (16.10). 

16.11 Tfcro. 2 < x & exp(x,Jfc,/) -> / < K # (2 •/(*))# (2 • /(*)). 

Proof. Suppose 3/:3/^(16.11). By BLNP there exist minimal such k 
and /. Suppose k = 0. Then / = {{0,1}} = {(0 + l) 2 + l} = {2} < 146-4 = 
584, but K#2#2 = |K| 2 = 16394, so con (16.11), a contradiction. Thus 
k ^ and therefore 

Rstr(/, k - 1) < K # (2 ■ f(k 1)) # (2 • f(k - 1)) < K # /(fc) # f{k). 

By (16.7) and (16.10), / < (K # (2 • /(*))) • (K # f(k) # /(*)). But 

K # (2 • f(k)) # (2 ■ /(A)) = |K # (2 ■ /(*)) | 2 • (K # (2 • /(A)) # f(k)) 
- (K#(2./(A))).(K#(2-/(fc))#/(A:)) 

by (16.8), so con (16.11), a contradiction. Thus (16.11). 

16.12 T/im. x is a power of two — »> 3/c3/(exp(2, /) & /(fc) = x). 

Froo/. We have (16.12): k < x, / < K # (2 • x) # (2 ■ x) by (16.6) and 
(16.11). Suppose : 3x^(16.12). By BLNP there exists a minimal such x. 
Since exp(2,0, {{0, 1)}) and {(0, l)}(0) = 1 we have x / 1. Therefore x/2 is 
a power of two, and there exist kj and / x such that exp(2, ki,fi) & /i(/ci) = 
x/2. Let A; = fcj + 1 and let / = /i U{(&, x)}. Then exp(2, k, f) k f(k) = x, 
a contradiction. Thus (16.12). □ 

This does not yet solve the test problem of Chapter 14 because we 
need e 3 (k) in order to have 2 k = x. 



« 



66 16. BOUNDS ON EXPONENTIAL FUNCTIONS 

16.13 Thru. s(k) ^ s l (k). 

Proof. Clearly e l (k) — ► e(k). Suppose exp(x,k,f) & i < k. Then 
exp(x, i, Rstr(/, i)) and thus e(k) — * e l (k). □ 

We need some sort of bound on / when exp(0, A, /) or exp(l, k, f) holds. 

16.14 Thm. exp(0,fc,/) & < t < A; — > f{i) = 0. 

Proo/. Suppose %p (16.14). Then /(i) = - /(» - 1) = 0. Thus (16.14). 

16.15 Thm. exp(l,jfc,/) & t < A; -> /(t) = 1. 

Proof. Suppose 3^"— '(16.15) . By BLNP there exists a minimal such i. 
Clearly 1^0. Therefore f(i — l) = 1, so f(i) = 1, a contradiction. 
Thus (16.15). 

16.16 Def. Proji z = x <-> 3y (x, y) = 2, otherwise x = 0. 

16.17 Def. Proj 2 2 = y «-+ 3x (x, y) = 2, otherwise y = 0. 

16.18 Def. Rplc( 2 ,</) = (Proji 2, ff (Proji 2)). 

16.19 Thm. xi < x 2 k y 1 < y 2 -> (x^j/i) < (x 2 ,y 2 ). 

Proof. Suppose hyp (16.19). There exist u and v such that Xi + u — x 2 
& 2/i + v = J/2- Therefore (x 2 ,y 2 ) = (xi + u + yi + v) 2 -h yi + v = (xi,yi) + 
(« + v) 2 + 2 • (w + v) • (xi + yi) + v. Thus (16.19). 

16.20 Thm. x < 2 & exp(x,A;,/) & exp(2,fc,^) -+ f <g. 

Proof. Suppose hyp (16.20). Then 1: z\ € f k z 2 G / k z\ ^ z 2 — ► 
Rplc(3i,ff) i- Rplc(z 2 ,fiO, since hyp (I) -> Projj z x ^ Projj z 2 - Also, z e f 
-+ 2 < Rplc(s,g) k Rplc(z,sr) G £? by (16.19). By FS (see Chapter 12) we 
have con (16.20). Thus (16.20). 

16.21 Thm. exp{2,kj) ^ 3f exp(0, k, f ) k 3/j exp(l, A:, f x ). 

Proof. Now (16.20) gives (16.21): f < fji < f. Suppose 3fc3/-n(16.21). 
By BLNP there exist minimal such k and /. Clearly k ^ 0. Therefore 
exp(2,A — l,Rstr(/,fc — 1)), and there exist go and g\ such that we have 
exp(0,/c — l,yo) & exp(l,fc — l,fli). So now we let / — g Q U {(A;,0)} and 
let fi = gi U {(A:,l)}. Then con (16.21), a contradiction, and thus (16.21). 

16.22 Thm. 2 < x & exp(x, A;, /) k exp(x,/, g) — ► 3/i exp(x, A; + /, h). 

Proof. Observe that (16.22): h < K # (2 • /(A;) -y(A;)) # (2 ■ f(k) -g(k)) by 
(16.11) and (13.4). Suppose 3A;3/->(16.22). By BLNP there exist minimal 
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such k and /. Obviously k / 0. We have exp(x, k — l,Rstr(/,fc — 1)), so 
there exists hi such that exp(x, k — 1+/, hi). Let h = hiU{(k+l, f(k)-g(l))}. 
Then exp(x, k + which is a contradiction. Thus (16.22). 

16.23 Thm. e(k) +4 s 2 (k). 

Proof. Clearly £ 2 (k) — ► e(/:) (or if it is not clear, see the proof of REL). 
Suppose e{k) & e(1). We claim that 1: 3hexp(x,k + l,h). Suppose x < 2. 
There exist / and g such that exp(2,A;,/) & exp(2, l,g), so by (16.22) 
there exists hi such that exp(2, k + /, hi). By (16.21) we have (l), and thus 
x < 2 — ► (1). Suppose 2 < x. There exist / and g such that exp(x, A;,/) 
& exp(x,/,$r), so by (16.22) we have (l). Thus (1), and thus e(k) & e(l) 

e(Jfe + /). By (16.13) we have e(k) £ 2 (Jt), and so (16.23). 

16.24 Thm. 2<x & exp(x,fc,/) k, exp(x,/,<?) &: exp(x,k-l,h) & 
J<l^h(k.j)<x#4#f(k)#g(j). 

Proof. Suppose hyp {16.24) 3 [0]. Then h(k ■ 0) = 1 and 

^#4#/(fc)#sr(0)=x#4#/(fc)#l = l. 
Thus (16.24)^0]. Suppose (16.24) & hyp (16.24) j\Sj]. Let 

a = x#4 #/(*)#</(/). 

Then fc(jfc ■ Sj) = h(k - j) - = fc(jfc • j) - f{k) < a ■ f(k). But 

x#4#/(A;)#< ? (Sj) >z#4 #/(*)# (2- «?(/)) - 

a • (x # 4 # /(*) # 2) > a - (2 # 4 # /(A:) # 2) = a • (4 # /(*)) - 

a - >«■/(*). 

Thus mrf ; - (16.24), and by BI we have (16.24). 

16.25 Thm. 2 < x & exp(x,fc,/) k, exp(x,/,#) — »■ 3/iexp(x,fc ■ /,/i). 

Proo/. Let a = x # 4 # /(jfc) # gr(/). By (16.24) and (16.11) we have 
(16.25): < K # (2 ■ a) # (2 • a). Suppose 3A;3/-(16.25). By BLNP there 
exist minimal such k and /. Clearly k ^ 0. As a consequence, we have 
exp(x, k — 1, Rstr(/, k - l)), so there exists hi such that exp(x, [k— l)-l,hi). 
Since exp(x,/,g) and k • I — (k - 1) • / + /, we conclude from (16.22) that 
3^ exp(x, k */, h), a contradiction. Thus (16.25). 
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16.26 Thm. E{k) *-> E 3 (k). 

Proof. We have £ 3 {k) -> s(k) by REL. Suppose e(k) & e(l). We 
claim that 1: 3hexp(x, k -l,h). Suppose x < 2. There exist / and g such 
that exp(2,/c,/) &; exp(2, l,g), so by (16.25) there exists h\ such that 
exp(2, k ■ I, hi). By (16.21) we have (l), and thus x < 2 — ► (l). Suppose 
2 < x. There exist / and g such that exp(x,fc,/) & exp(x, /,</), so by 
(16.23) we have e(k) <r 3 (fc), and so (16.26). 

16.27 JTim. exp(2,fc,/) & exp(x,A;,0) & i < k -* g(i) < (2 • x) # /(t). 

Proof. Suppose 3i'-i( 16.27). By BLNP there exists a minimal such i. 
Clearly i / 0. Consequently, g{i — 1) < (2 ■ x) # f(i — 1), so 

(2.x)#/(0 = (2-x)#(2-/(t-l)) = 

]2 ■ x\ 2 • ((2 • x) # /(i - 1)) > x • ff (t - 1) = ^(0- 

This is a contradiction, and thus (16.27). 

16.28 Thm. exp(2,fc,/) & 2 < x By exp(x, $). 

Froo/. Let a = (2-x) # /(it). By (16.27) and (16.11) we have (16.28): g < 
K # (2 ■ a) # (2 • a). Suppose 3fc3/-(l6.28). By BLNP there exist minimal 
such k and /. Clearly k ^ 0. We have exp(2, k - 1, Rstr(/, k — l)), so there 
exists gi such that exp(x, k — l,<7i). Let j = ^U {{fc,x • ^(A; — l))}. Then 
con .(16.28), a contradiction, and thus (16.28). 

16.29 Thm. exp(2, kj) e{k). 
Proof. By (16.28) and (16.21). 

16.30 Thm. x is a power of two — > x is a power of 2. 
Proo/. By (16.12), (16.29), and (16.26). □ 

This is a positive solution of the test problem of Chapter 14. It is 
more than just a test problem, because using it we can show that all of 
the nonlogical symbols of Chapter 14, except for e and f , are equivalent to 
bounded symbols, and it will be essential in the sequel to have a bounded 
function symbol for the logarithm. 

16.31 Thm. A(x). 

Proof. By (16.30), 3k \x\ 2 -2 = 2*. But x < \x\ 2 • 2, so (16.31). 
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16.32 Def. Logx= 3f(f < K # (2 • |x| 2 ) # (2 • |x| 2 ) & exp(2,Jfc,/) & 
f(k) = |x| 2 ). 

The existence condition holds by (16.30) and (16.11), and the uniqueness 
condition holds by (13.11). 

16.33 Thm. Log x = Log x. 

Proof. By (14.11), (16.26), and (16.11). 

16.34 Thm. x# y = x#y. 
Proof. Write a for 

3/(/<K#(2.x.y)#(2-x.y) & 

exp(2, Log x - Logy,/) & /(Log x • Log y) = x#y). 

Then (16.34) ~ a, by (16.33), (14.11), (14.3), (16.26), and (16.11). Sup- 
pose 3y-i(l6.34). Then so by BLNP there exists y such that min v ->a, 
i.e., min y x# y ^ x#V- Since ^#o2/ = z#o|y|2 and x#y = 2#|y| 2 , 
we have y = y| 2 by the minimality assumption, so that y is a power of 
two. Clearly y £ 1 and y ^ 2. Therefore x # y = x# ({y/2) -2) = 
(x#o(y/2))-(x# 2) = (x# (y/2))-(x#2) = x # y, again by the minimal- 
ity assumption. This is a contradiction, and thus (16.34). □ 

Thanks to (16.31), (16.33), and (16.34), we will have no further use for 
the symbols A, Log , and #o • The next result shows that "x is a power 
of 6" is also equivalent to a bounded formula. 

16.35 Thm. x is a power of b ^ (6 = & (a: = OVx = 1)) V (6 = 1 & X = 1) 
V3k3f(k<x & /< K#(2-x)#(2-x) & exp(M,/) & f(b) = x). 

Proof. By (14.11), (16.26), and (16.11). □ 

We conclude this chapter by giving the defining axiom for superexpo- 
nentiation. The uniqueness condition holds by (12.18). 

16.36 Def! x ft k = z 3f{f is a function & \fi(i 6 Dom/ <-> i < k) & 
/(0) = 1 & Vt(t < k ~ s{f(i)) & f(i + 1) = x T /(0) & /(*) = 
otherwise 2 = 0. 



Chapter 17 
Bounded replacement 



Let Q' 4 be the current theory. 

Metatheorem 17.1 Let T be an extension of Q' 4 , and let D be such that 
3yD is a bounded formula of T and X\,...,x u are the variables distinct 
from x and y occurring free in D. Then 

BR. a is a set &; Vx(x 3yT>) — ► 

3f(f is a function & Bom f - a & Vx(x £ a — ► D„[/(x)])) 

is a theorem of T, and 

BRD. {(x, y) \ x <E a &i min v D} = /<->/ is a function & 

Dom / = a & Vx(x E a — ► (min^ D)„[/(x)]), otherwise / = 1 

is the defining axiom of a bounded function symbol. (The variables in the 
term {(x,y) : x G a &; m\n y D} are a, z\, . . . , x^J 

Demonstration. Introduce the bounded function symbol f with defining 
axiom 

fxxi . . . x v — y <-» min v D, otherwise y = 0. 

We will suppress the variables £!,...,£„ from now on, and we will write fx 
for fxxi . . . x v . To prove (BR), we argue in T as follows. 
We claim that 
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1. 3x(x Ga)-> 3z(z G a & \fw(w G a — > fu> < fz)). 

For suppose 3a->(l). By BLNP there exists a minimal such a. There exists 
x such that x G a. Let b = {! £ c : ^ z}. By (10.20), 6 < a; so by the 
minimality of a there exists z x such that z x G 6 & Vw(u; G 6 — > ftf < f^i). 
Suppose fz! < fx and let 2 = x. Then we have a contradiction, and thus 
fx < \z\. Let z = z 1 . Again we have a contradiction, and thus (l). 

Introduce the bounded function symbol Maxm f with defining axiom 

Maxmf a = z ««-> min 2 (z G a & \fw{w G a — ► iw < fz)), 
otherwise z — 0, 

and the bounded function symbol Bd f by 

Bd f a = |K • (SPMax(a,f Maxm f a)) 4 | 2 -2. 

Then we claim that 

2. a is a set — ► Sf(f < {Bd f a) # a & f is a function &: 
Dom / = a & Vx(x G a -> /(x) = fx)). 

Suppose 3a->(2). By BLNP there exists a minimal such a. Suppose a — 
and let / = 0. Then (2), a contradiction, and thus a ^ 0. Since a is a set, 
there exists x such that xo G a. Let b — {t G a : t ^ Xo}. By (10.20), 
2 ■ b < a. By the minimality of a there exists # such that scope^j(2) f a \gb}. 
Let / = g U {(x ,f^o)}- Then / is a function, Dom f — a, and Vx(x G a — » 
/(x) - fx). By (16.5) we have 

/ < K ■ ((Bd f 6) #6) • (SPMax(x ,fx )) 4 < (Bd f a) • ((Bd f 6) # 6). 

By (l) we have Bd f b < Bdf a, so by (16.8) we find 

/ < (Bd f a) • ((Bdf a) # b) = (Bd f a) # (2 • b) < (Bd f a) # a. 

Hence we have con (2), a contradiction, and thus (2). 

Now suppose hyp (BR). There exists / such that scope^f (2). Suppose 
x G a. Then 3yD, so by BLNP we have Bt/min^D. Thus x G a — ► D„[/(x)], 
and thus (BR). 

The uniqueness condition for (BRD) holds by (12.2), and we have 
Sfrhs (BRD): (Bd f a) #a,x < a. □ 

Whenever a term of the form {(x,y) : x G a & min y D} occurs, it is 
understood that the corresponding defining axiom of the form (BRD) has 
been adjoined to the theory. We will write 
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{{x, y) : x E a k. D} for {{x, y) : x E a & mm y D}, 

though we usually use this abbreviation only when H D <-» min y D. Also, 
we write 

{(x,b) : x E a} for {(i,y):i£a&y — b} 

where y is the first variable in alphabetical order distinct from x and a and 
not occurring in b. 



Chapter 18 

An impassable barrier 



Let us pause to examine from an impredicative point of view what we 
are doing. Take a strong theory T containing and S, say an extension 
by definitions of Peano Arithmetic I or even of ZFC (Zermelo-Fraenkel set 
theory with the axiom of choice). Let T be the theory obtained by adjoining 
a unary predicate symbol <p and the axiom 

Fin. 0(0) & (<t>(x) <f>(Sx)). 

This adjunction does not increase the power of the theory in any way; 
we can for example interpret <p(x) by x = x. If T is an axiomatization of 
arithmetic, say an extension by definitions of /, then by a specific number we 
mean a variable-free term b of T; if T is an extension by definitions of ZFC 
containing the constant w denoting the set of all natural numbers, then by 
a specific number we mean a variable-free term b of T such that h T bEw. 
We say that a specific number b is a finite number in case \-f <f>(b). 

Now consider a specific number b, such as 10000 or 10 f 10 j 10, and 
try to prove 0(b). The initial reaction of some mathematicians to such 
a problem is a failure to see the difficulty: they suggest proving 0(b) by 
induction. But even if the induction principle is an axiom scheme of T, 
we do not have induction available for 0(x), because the axioms of T say 
nothing about formulas containing 0. A second reaction is that the problem 
is trivial because there is an obvious proof in b steps. This observation 
manages to be both meaningless and incorrect; meaningless because of the 
ubiquitous pun confusing the formal and genetic concepts of number, and 
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incorrect because there are specific numbers b for which one can show that 
there is no proof in T of <£(b). That is, there is a specific number that is 
not a finite number. 

To see this, we will let T be an extension by definitions of I. We as- 
sume that J is consistent; otherwise there is indeed a proof in T of <£(b). 
Consider GodeFs construction of a closed formula VnC[n] that is unprov- 
able even though C[0), C[l], C[2j, . are all provable. Let D be the unary 
formula C\n] — * VnC[n]. Then 3nD[n] is provable, since it is equivalent to 
the tautology VnC[n] -> VnC[n], but D[0], D[l], D[2], ... are all unprov- 
able, since from a proof of one of them and the proof of the corresponding 
theorem among C[0], C[l], C[2], ... we would immediately obtain a proof 
of VnC[n], Now consider the constant N with the defining axiom 

1. N = n <-* D\n] & Vm(m < n -- >• -iD(m]). 

The existence condition holds by the least number principle and the unique- 
ness condition is obvious. We assume that (l) is an axiom of T. We claim 
that <f>(N) is not a theorem of T. To see this, take a model of the consistent 
theory obtained by adjoining ->D[0], — >D[l] , ~ | Dj2], ... to T and represent 
by membership in the smallest subset of the universe of the model contain- 
ing the individual representing and closed under the function represent- 
ing S. Then (f>{N) is not valid in the model, so <^(A T ) is not a theorem of T. 
I am grateful to Simon Kochen for this example. 

Now consider a specific number b of the form f(0, ...,0), where f is 
a function symbol representing in T the primitive recursive function F. 
All mathematicians apparently believe that it is meaningful to speak of 
the number p such that if p is the term S • ■ ■ SO with p occurrences of S, 
then h T p = b. To the Cantorian, p exists in a Platonic world; the in- 
tuitionist is convinced that p can in principle be constructed; the finitist 
accepts p because it is finite. But the argument that b is a finite number 
because there is a proof of 4>(b) in p steps is circular —the number p is itself 
given as F{0, ... ,0), and how do we know that the putative proof will ever 
terminate? Consider the example that b is SSO ft SSSSSO. What does it 
mean to speak of the term S • • ■ SO with 2 ft 5, or 2 t 2 | 2 t 2 | 2, or 2 65536 
occurrences of S? This involves the genetic concept of number. But if one 
produces occurrences of S at the rate of one every 10~ 24 seconds, which is 
about the time it takes light to traverse the diameter of a proton, and if 
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the age of the universe is taken to be twenty billion years, then it will take 
more than 10 19684 ages of the universe before 2 ft 5 occurrences of S have 
been produced (and by the same token, what genetic meaning can io 19684 
have?). The point is that to regard 2 ft 5 as standing for a genetic number 
entails a philosophical commitment to some ideal notion of existence. To 
a nominalist, 2 ft 4 stands for a number, 65536, to which one can count, 
but 2 ft 5 is a pair of arabic numerals with a vertical double arrow between 
them, and there is not a scintilla of evidence that it stands for a genetic 
number. There is a story of a bank employee who was told to count a 
bundle of bill to verify that there was actually a thousand of them. The 
employee began to count them: 1,2,3, ...,61,62,63 — and then stopped, 
being convinced that since it had checked perfectly all that way it must be 
correct. 

There are more efficient ways of using the axiom (Fin) than step by step 
as a rule of inference, and we can actually prove 4>(b) for specific numbers b 
much bigger than those we can actually count to. For example, let 

ao = 2, ai — ao ■ ao, a2 = aj • ai, . . . , a 16 = ai5 • ai5, 

so that f- a 16 = 2 ft 5. Form 3 (x). Then 3 (x) respects multiplication and 
is stronger than 0(x), so one quickly obtains proofs of 

3 (a o ), 3 (aO, 3 (a 2 ), 3 (a 16 ), 3 (2 ft 5), 

and so of 0(2 ft 5). Encouraged by this success, one might expect that for 
every construction of a function symbol f representing a primitive recur- 
sive function, one could constuct an inductive predicate symbol 0' stronger 
than to be used in proving 0'(f(O, . . . , 0)) and so 0(f(O, . . . ,0)), but this 
is not so. The reader may enjoy seeing how to construct proofs of the for- 
mulas 0(2 ft 6), 0(2 ft 7), . . . ,0(2 ft 2 ft 4) in extensions by definition of T. 
But there are limits to such methods; no one will ever prove 0(2' ft 2 ft 5). 
Proofs ordinarily involve the use of quantifiers, and Hilbert and Ackermann 
showed how to eliminate quantifiers from a proof. When all quantifiers have 
been eliminated, we are reduced to using (Fin) step by step as a rule of 
inference, and so a proof of 0(b) with quantifiers eliminated must have at 
least p steps, where h T p = b. But one can estimate the increase in the 
length of a proof when quantifiers are eliminated, and so obtain a lower 
bound on the length of the original proof. As one can see from this de- 
scription, the argument involves accepting rather large formal numbers as 
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standing for genetic numbers. The arguments given in this chapter to es- 
tablish Assertions 18.1 and 18.2 are finitary, but no claim is made that they 
can be carried out predicatively. 

By the rank of a formula we mean the number of occurrences of 3 
in it. In the following Assertions we will use proof (in a theory T) to 
mean a sequence of formulas of T each of which is an axiom of T, is a 
tautological consequence of preceding formulas, or can be inferred by 3- 
introduction from a preceding formula (see the discussion of induction on 
theorems in [Sh,§3.l]), and a proof of A is a proof whose last formula 
is A. By the rank of a proof we mean the maximal rank of the formulas 
in it. Let Z be the theory whose nonlogical symbols are and S, and 
whose nonlogical axioms are (3.1) and (3.2); i.e., Sx ^ and Si = Sy — > 
x — y. Then h % pi ^ p 2 whenever p\ is unequal to p 2 . We use various 
arithmetical symbols metamathematically, including f for exponentiation 
and ft for superexponentiation. 

Assertion 18.1 Let T be a consistent open extension of Z, and let b be 
a variable-free term of T such that h T b ^ p for all p with p < 2 ft p. Then 
any proof in T of 4>(h) of rank r has at least 2 ft (p — 2 ■ r — 3) formulas. 

Argument. Refer to the proof of the Consistency Theorem in [Sh,§4.3]. 
Assume that we are given a proof in T of 0(b) of rank r with n formulas. 
By Lemma 1 of [Sh,§4.3], 4>{h) is a tautological consequence of formulas 
in A(T). Let us examine the proof of Lemma 1 to see how many are 
required. Let F be the smallest function such that for any proof with 
A formulas of a formula A in a theory U, any closed instance of A is a 
tautological consequence of F(X) formulas in A(U). Then we have from 
the proof of Lemma 1 that 

F(l) = 1 and F(\) < max ( ^ F(fi), 1 + max F(/3) ] 

(according as A is an axiom, is a tautological consequence of preceding 
formulas, or is inferred by 3-introduction from a preceding formula). Hence 
F(X) < 2 A — 1, and so 0(b) is a tautological consequence of 2 r?_1 formulas 
in A(T). Let U be the theory T[-i0(b)]; then U is an open inconsistent 
theory, and there is a special sequence (that is, a sequence of formulas 
such that the disjunction of their negations is a tautology) of 2 V formulas 
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in A T (U). We let K(v) be the minimal number of formulas in a special 
sequence all of whose formulas are in A^U). Then K(t) < 2 n . Since 
2ft(//-2-r-3) = Log(2 ft (// - 2 • r - 2)) and Log K(t) < rj, it suffices 
to show that 2ft(/z-2-r-2)< K(r). 

We claim that 2 ft /x < -ff(O). From a special sequence containing K(0) 
formulas in A (U) we obtain, upon deleting the instances of identity axioms 
and equality axioms, a quasi-tautology ~iAi V ■ • • V ->A^, where each A a 
for a from 1 to A is an instance of a nonlogical axiom of U, and A < 
K(0). Since T is consistent, T is consistent, because we can interpret <f>(x) 
by x = x. Therefore the axiom ->^(b) of U must be one of the A a . Let the 
other formulas among the A a that contain <j> be (Fin)[biJ, . . . , (Fin)|b^], so 
that 7 < K(0), and let T be 

T[(Fin)[b 1 ],...,(Fin)[b,]]. 

Then- we have 

1. h T( , <£(b). 

Let Bp be the formula hi — p V • • • V b 7 = p. Since T is a consistent ex- 
tension of at most 7 °f the formulas B p are theorems of T. Suppose 
7 < 2 ft fi. Then there is a p with p < 2 ft /x such that we can consistently 
adjoin ->B P to T. But then there is an interpretation I of T in T[->B p ] in 
which 

4>i (x) is x = V x = SO V • • • V x = p; 
in fact, for /? = 1, . . . , 7 we have 

^ThB„]b/j - Ovb^^SOV-.-Vb^-p^ 
Sb^ - V Sb = SO V - • • V Sb = p 

since -.b,,] b/j / p. Using (l) we obtain a proof in T[-B,,] of <^(b), i.e. of 
b = Ovb = SOV---Vb = J o, which is impossible. Thus 2 ft fi < 7 < K(0), 
which establishes the claim. 

Consider a special sequence of k formulas. In the proof of Lemma 2 
of [Sh,§4.3], the special sequence is divided into three portions: A, for 
i — l,...,r; B x [aj] — » 3xB for j = l,...,p; and 3xB — ► B x [r], so that 
r + p + 1 — /c. From this a new special sequence is obtained (with the 
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formulas belonging to the special constant r eliminated), and the number 
of formulas in it is r ■ (p + 1). Since r + (p + l) = k, this is at most 
Qt(4,/c 2 ). The next time we eliminate forrriulas belonging to a special 
constant we get at most Qt(4,/c 4 ) (in fact,, at most Qt(4 3 ,«; 4 )) formu- 
las, and when we have eliminated all formulas belonging to special con- 
stants of maximal rank we get at most Qt(4, /c f 2 t k.) formulas. That is, 
A-K(u-\)< K(u) T 2 t K{v). Let 

L(v) = K(v) + Log(Log K(v) + 1) + 1. 

Then 4 • K{u - 1) < 2 \ 2 \ L(v - 1) and L{v - 1) < 2 | 2 T We have 

already seen that 2 ft ^ < if (0). Therefore 2 ft (// - 1) < L(0), so 

2ft(M-3) <L(l),...,2ft(M-2.T-l) <L(r), 

and hence 2 ft — 2 • r — 2) < K(t), as was to be shown. □ 

Earlier I said rather dogmatically tha,t no one will ever prove the formula 
<f>{2 ft 2 ft 5). Assertion 18.1 gives some evidence for this. Suppose we try 
to prove <f>(2 ft 2 ft 5) starting from a consistent extension T of Z to which 
we adjoin (Fin). The theory T may not be open, but by Skolem's Theorem 
(see [Sh,§4.5]) it has a conservative open extension T°, and each axiom 
of T can be proved rather quickly from the corresponding axiom of T°. 
However, in Assertion 18.1 we used a restricted notion of proof. There 
are various devices, discussed in Chapters 3 and 4 of [Sh], that shorten 
a proof: use of extensions by definition, the Deduction Theorem, special 
constants, and so forth. One has the impression on reading about these 
devices that they shorten proofs by at most exponential factors, which 
are quite negligible in comparison to the bound of Assertion 18.1. This 
impression is worth studying in detail; we will do so later on. For the 
present, let me summarize by saying that I can count to 2 ft 4 but not 2 ft 5, 
and I can prove <f>(2 ft 2 ft 4) but not 0(2 ft 2 ft 5). 

Now we turn to the consequences of Assertion 18.1 for the predicative 
theory of arithmetic that we are developing. The reader may have w r ondered 
why we did not extend the relativization scheme to incorporate j instead 
of jf. If one looks at the proof of REL in Chapter 5, the natural next step 
would seem to be to let C 4 be an abbreviation for Vy(C 3 [y] — ► C 3 [y j x]), 
and then try to establish the further claims 
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16. C 4 [x] -> C 3 [x], 

17. C 4 [0], 

18. C 4 \x] C 4 [Sx], 

19. C 4 [x] & u < x C 4 [u], 

20. C 4 [x!] & C 4 [x 2 ] -+ C 4 [x! + x 2 ], 

21. C 4 [X!] & C 4 [x 2 ] C 4 [X! -x 2 ], 

22. C 4 ^] & C 4 [x 2 ] - C 4 [x! t x 2 j. 

The trouble in trying to establish (22) is that f (unlike -f , •, and #) is 
not associative. We cannot in this way extend the relativization scheme to 
incorporate ]. This raises the question as to whether some other scheme 
might work, but the following Assertion is that there is no relativization 
scheme incorporating f for the generic inductive formula <f>. See also [PD]. 

Assertion 18.2 Let T be a consistent extension of Q' 2 . 1: No inductive 
formula of T is stronger than (f>(x) and respects f . 2: No inductive formula 
of T is stronger than <f>{2 ft x). 

Argument. Suppose C\ is an inductive formula of T that is stronger 
than <f>[x) and respects f, and let C 2 be 0^2 ft x]. It is easy to see that 
2ft0 = l, 2ftx^0^2ftSx = 2T(2ftx),and2ftx = 0->2ftSx==0 
are theorems of Q' 4 . Therefore C 2 is inductive and stronger than <f>(2 ft x). 
Thus to establish (1) it suffices to establish (2). 

Suppose C 2 is an inductive formula of T that is stronger than <j>{2 ft x). 
Let T° be an open conservative extension of T; this exists by Skolem's 
Theorem (see [Sh,§4.5]). The formula C\ respects addition, so that 

C\\x\ - C*[x + x]. 

Hence the number of formulas in a proof in T° of <f>(2 ft (2 | p)) grows 
only linearly with p while the rank remains constant, which contradicts 
Assertion 18.1. Thus Assertion 18.2 holds. □ 

This result may serve to deepen one's mistrust of the induction principle. 
There is a barrier separating the predicative from the impredicative, a 
barrier as absolute as that between the genetic and the formal, and more 
sharply delineated than the 'debatable demarcation between the finite and 
the infinite. 

As syntactical methods for establishing certain inductions have failed, 
we may be tempted to turn to semantics and appeal to the set lo of all 
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natural numbers. Of course it is a theorem of axiomatic set theory that 
formalized Peano Arithmetic is consistent, but this is not what people have 
in mind who argue that Peano Arithmetic is consistent because its axioms 
are true statements about uj. What is at issue here is not the familiar 
construct of formal mathematics, but a belief in the existence of u> prior 
to all mathematical constructions. What is the origin of this belief? The 
famous saying by Kronecker that God created the numbers, all else is the 
work of Man, presumably was not meant to be taken seriously. Nowhere 
in the book of Genesis do we find the passage: And God said, let there be 
numbers, and there were numbers; odd and even created he them, and he 
said unto them, be fruitful and multiply; and he commanded them to keep 
the laws of induction. No, the belief in lj stems from the speculations of 
Greek philosophy on the existence of ideal entities or the speculations of 
German philosophy on a priori categories of thought. An appeal to u> to 
justify the induction principle is no more secure than are these philosophical 
systems, and yet it is hard to relinquish. We are creatures (Kronecker had 
it backwards), not too much older than an infant in a crib, and we still feel 
the urge to count on something when we count. The infant counts on its 
fingers, the mathematician counts on uj — but the infant at least knows its 
fingers to exist. The mathematician's attitude towards uj has in practice 
been one of faith, and faith in a hypothetical entity of our own devising, to 
which are ascribed attributes of necessary existence and infinite magnitude, 
is idolatry. 

We now have an extensive development of predicative arithmetic and 
some idea of its limitations. These limitations were found using the Consis- 
tency Theorem. The proof of the Consistency Theorem is finitary; in fact, 
it was devised with the laudable aim of defending formal mathematics from 
the attacks of the intuitionists. But can the Consistency Theorem itself be 
established predicatively? More generally, which results of mathematical 
logic can be established predicatively? Using our stringent test of predica- 
tivity as interpretability in Q, we can study this question by arithmetizing 
syntax within our predicative theory of arithmetic and seeking predicatively 
to prove arithmetizations of the fundamental results of finitary mathemat- 
ical logic. Let us do this, following [Sh] in shameless detail. It is a long 
journey. Before setting out we may remark that it is doomed to failure. 
The Consistency Theorem can be used to prove the consistency of Q, so if 
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we could establish, within our theory, both it and GodeTs theorem on the 
impossibility of self-consistency proofs, then we would have a contradiction. 
This indicates that at least one of these two pillars of finitary mathemati- 
cal logic, the Hilbert-Ackermann Consistency Theorem and GodePs Second 
Theorem, makes an appeal to impredicative concepts. 

In addition to philosophical objections to impredicative methods, one 
may have mathematical misgivings about their use. Perhaps the place to 
look for possible trouble is not in the upper branches of set theory, but 
rather at the very roots in arithmetic where impredicativity first appears. 



Chapter 19 
Sequences 



In this chapter we will predicatively arithmetize the basic syntactical 
notions of juxtaposition, substitution, and occurrence. 

19.1 Thm. BzVwf(w) < f(z). 

Proof. We have (19.1): z < f,w < f. Suppose 3/-(19.1). By BLNP 
there exists a minimal such /. Suppose ->(/ is a function) V / = 0, and let 
z — 0. Then (19.1), a contradiction, and thus / is a function & / ^ 0. 
By (12.2) there exists t such that t G /, and there exist x and y such that 
(x, y) — t. Let g — {s G / : s / f}. By the minimality of / there exists 
Z\ such that Vtu g[w) < g{zi). Suppose f(zi) < f[x) and let z = x. Then 
(19.1), a contradiction, and thus f(x) < f(zi). Let z = z\. Then (19.1), a 
contradiction, and thus (19. l). 

19.2 Def. Maxm/ = z ^ mm 2 Vw f{w) < f(z). 

The existence condition holds by (19.1) and BLNP, the uniqueness con- 
dition is obvious, and we have 3z rhs (19.2): z < f,w < f '. 

19.3 Def. Sup / = /(Maxm/). 

19.4 Def. u is a sequence +-> u is a function & 3n\/i(i is in 'the domain of 
u 1 < i < n). 

19.5 Def. Lnu = n +-+ u is a sequence & W(z is in the domain of u «-> 
1 < z ' < n), otherwise n = 0. 

19.6 Z)e/. Chopu = {z E u : z ^ (Ln u, w(Ln it)) }. 
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19.7 Thm. u is a sequence & u ^ — ► Chopu is a sequence & LnChopu-f 
1 = Lnu k, 2 ■ Chop u<u. 

Proof. Suppose Ayp(19.7). Then Chop u is a function and \fi(i is in 
the domain of Chopu 1 < t < Lnu — l), so Chopu is a sequence and 
LnChopu + 1 = Lnu. We have 2 • Chopu < u by (10.20). Thus (19.7). 

19.8 Thm. Lnu < Logu. 

Proof. Suppose 3u^(l9.8). By BLNP there exists a minimal such u. 
Suppose -i(u is a sequence) V u = 0. Then Lnu = and so (19. 8), a 
contradiction. Thus u is a sequence & u ^ 0. By the minimality of u 
and (19.7), Ln Chopu < Log Chopu. Since 2 • Chopu < u we have Ln u = 
Ln Chopu 4- 1 < Log Chopu + 1 < Logu. Hence (19.8), a contradiction, 
and thus (19.8). 

19.9 Thm. 3a(a is a set & \/z(i E a <-» i < Logx) <k 
a< (730- (Logx) 2 )#x). 

Proof. Suppose x = and let a = 0. Then (19.9), and thus (19.9)* [0]. 
Suppose (19.9). Then there exists a such that scopes a {!9.9). We have 
Log (x + 1) — Log X — + (l9.9) x [Sx], so suppose Log (x + 1) ^ Logx. Then 
Log (x + 1) = Log x -f 1 and |x -f 1 12 = |2 • x j 2 . Let «i = aU {Log x}. Then 
ai is a set and Vi(t 6 fli <-» t < Log (x + 1)). Let c = 730 ■ (Log (x + l)) 2 . 
By (16.2), (16.1), and (16.8), 

aj < 5 ■ SPa • 146 • (Logx) 2 < 

730- (Log x) 2 ■ ((730- (Logx) 2 ) # x) < 

|cj 2 • (c # x) = c # (2 ■ x) - c # |2 • x| 2 = c # |x + 1| 2 - c # (x + 1). 
Thus (l9.9) x |Sx], and thus ind x (19.9). Hence (19.9) by BL 

19.10 Def. Setlogx = a a is a set &: Vz(z £ a ! < Logx). 

The uniqueness condition holds by (12.2), and by (19.9) we have the 
existence condition and 3arhs (19.10): a < (730- (Log (x + l)) 2 ) # (x + 1), 
i < Max (a, Log x). 

19.11 Def. Explogfn(x, y) = / <-» exp(x, Log y, /). 

The existence condition holds by (14.11) and the uniqueness condition 
holds by (13.2). Suppose exp(x, Log y, /). Let z = Max(x,2). There exists 
g such that exp(2, Log y, g). We have / < g by (16.20) and we have g < 
K#(2-<7(Logu))#(2-0(Logu)) by (16.11). But 
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y(Log y) = z | Log y < 2 f ((Log z + 1) • Log y) < 
(2-2)#y = Max(2-z 1 4)#y. 

Thus we obtain that 3/ rhs (19.11): / < K # (2 - (Max(2 • x, 4) # y)} # 
(2-(Max(2.x ) 4)# y )). 

19.12 De/. Explog(x,y) = Explogfn(x, y)(Logy). 

19.13 Thm. Explog(x,y) = x hogv . 
Proof. By (16.26). □ 

The point is that although the term x \ Log y contains the unbounded 
function symbol |, it can be written as a bounded function symbol applied 
to x and y. 

19.14 Def. Expln(x,y) = Explogfn(Ln y). 

19.15 Thm. Expln(x,y) = x Lny . 
Proof. By (19.8). 

19.16 Thm. u is a sequence — *■ « < (K • (Ln u ■ SP Sup u) 4 ) Lnt \ 

Proof. We have con (19.16) u < Expln(K • (Lnu ■ SPSupw) 4 ,u). 
Suppose 3u^(19.16). By BLNP there exists u such that min u -^(19.16). 
(I hope that no one will object that ( ) 4 involves an unbounded function 
symbol!) Clearly u / 0. Let n = Lnu and let v — Chopu. Then v < 
(K • {(n - 1) • SPSupu) 4 ) n_1 . We have u = v U {(n,u(n))}, so by (16.5) we 
have con (19.16), a contradiction. Thus (19.16). 

19.17 Thm. u is a sequence h Ln u < Logy &: Sup u < z — * 
u< (2-K-(LogySP 2 ) 4 )#y. 

Proof. Suppose hyp (19.17) and let w = K ■ (Logy SPz) 4 . By (19.16) 
we have u < w f Log y < 2 | ((Log w + 1) ■ Log y) < (2 • w) # y, and thus 
(19.17). □ 

Let be either a unary function symbol or the empty expression, for 
all (i from 1 to i/. We use 

A: UiXx < ai, . . . , u^x^ < a^ 

as an abbreviation for A «-> A', where A' is the formula obtained by replac- 
ing each part of A of the form 3x M B by 3x^(u M x^ < di^ & B), for all /i from 



19. SEQUENCES 



85 



1 to v. If all the are the empty expression, this agrees with our previous 
notation (see Chap. 7). 

If x occurs in A only in parts of the form 3x(x is a sequence h B) — or 
more generally, if A is equivalent to the formula obtained by replacing each 
part of A of the form 3xB by 3x(x is a sequence & B) — and if we have 

A: Ln x < Log a, Sup x < b 

or 

A:Lnx < Lna, Supx < b, 

then it follows from (19.17) and (19.8) that 

A:x< (2-K-(Loga-SPb) 4 )#a. 

In showing a formula to be bounded, we will usually write one of the former, 
leaving the latter to be inferred. 
Now we introduce juxtaposition. 

19.18 Def. u * v = {(i,y) : i € Setlog (u ■ v) &; 1 < i ' < Ln u + Ln v 
& (l<t<Lnu— >y = u(i)) &; (Ln u + 1 < i < Lnu + Lnu — > 
y = v(i - Lnu))}. 

19.19 Thm. u * v is a sequence & Ln (u * v) = Ln u + Ln v. 

Proof. Clearly u * v is a function. We have Vi(t is in the domain of u * v 
^ 1 < « < Ln u + Ln u) since Ln u + Ln v < Log (u ■ v) by (19.8). 

19.20 Thm. (u * v) * w — u * [v * w). 

Proof. Let / — (u * v) * w and let r = u * (v * w) . We claim that 
1: — r(i). Suppose 2: 1 < i < Lnu. Then — (u * v)(i) — u(i) and 
r(i) — u(i). Thus (2) — »■ (l). Suppose 3: Ln u -f 1 < i < Ln u + Ln v. Then 
— (u * v){i) — v(i — Lnu) and r(i) — [y * w)(i — Lnu) = v{i — Lnu), 
and thus (3) — » (1). Suppose 4: Ln u + Ln v 4 1 < i < Ln u -f Ln v + Ln w. 
Then we obtain /(z) = w(i - (Lnu + Lnu)) = w(i - Lnu - Ln v) and 
r(i) — (v * w)(i - Ln u) = w(i — Ln u - Ln v), and thus (4) — * (1). Suppose 
5: i — V Ln u + Ln v + Ln u; < t. Then /({) — and r(z) = 0, and thus 
(5) -> (1). Hence (l), and by (12.2) we have (19.20). 

19.21 Def. sum(u,u) +-> u and v are sequences & Lnu = Lnu & 
u(l) = u(l) & Vi'(l < i < Lnu -> + 1) = + u(t + 1)). 
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19.22 Thru, u is a sequence — > 3t>(sum(u, v) & Sup v < Lnu • Supu). 

Proof. We have (19.22) :Lnr < Lnu, Sup v < Lnu- Sup u. Suppose 
3u->(l9.22). By BLNP there exists a minimal such u. Suppose u = and 
let v = 0. Then (19.22), a contradiction, and thus u ^ 0. Let n = Lnu 
and let Uj = Chopu. There exists V\ such that sumf^,^) & Sup^i < 
(n — 1) ■ Supu!. Let v — V\\J {(n,vi(n — 1) + u(n)}}. Then sura(u,u). We 
have 

Sup u = Max(Sup vi, vi(n — l) + u(n)) < 
(n — 1) ■ Sup u + Sup u = n - Sup u, 

so that (19.22), a contradiction, and thus (19.22). 

19.23 Def. ^u = v sum(u,t>), otherwise v = 0. 

The uniqueness condition holds by (12.17), and we have 

3v rhs (19.23): Ln v < Ln u, Sup v < Ln u • Sup v. 

Notice that E ^ is the sequence of partial sums, and the total sum is 
(E u)(hn u). 

19.24 Def. prod(u,u) +-» u and v are sequences & Lnu = Lni; &; 
v(l) = & V«'(l < i < Lnu v(i + 1) = r(t) • «(i + l)). 

19.25 Thm. u is a sequence — > Br(prod(u, v) & Sup v < Expln(Sup u, u)). 

Proof. Suppose 3u^(19.25). By BLNP there exists a minimal such u. 
Suppose u — and let v — 0. Then (19.25), a contradiction, and thus 
« / 0. Let ft = Lnu and let uj — Chopu. Then there exists V\ such that 
pTod(ui,Vi) k. Sup^! < (Supu^""" 1 . Let v — v x U {{n,Vi(n - 1) ■ u{n))}. 
Then prod(u,t;). We have 

Sup v — Max(Sup v u vi(n - l) ■ u(n)) < (Sup u) n_1 • Sup u = (Sup u) n , 

so that (19.25), a contradiction, and thus (19.25). 

19.26 Def. l\u = v <-> prod(u,i>), otherwise r; = 0. 

19.27 TTim. t(n) <-> 3a(a is a set & Vz(z E a i < ?i)). 

Proof. Suppose er(ri). Then there exists / such that exp(2,n,/). We 
have n — Log /(re.). Let a — Setlog/(n). Then rhs (19.27), and thus 
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e(n) — > rhs (19.27). Conversely, suppose a is a set & Vi(z £ a <r+ i < n). 
Let u — {(i,x) : i E a} and let / = Y\u. Then exp(x, n, /), and thus 
(19.27). □ 

Let *** be obtained from — by forming the plural of a noun in — , let a 
be a term, and let x be the first variable in alphabetical order not occurring 
in — or a. Then we write "a is a sequence of ***" for 

a is a sequence & Vx(l < x < Ln a — *■ a(x) is a — ). 

Also, we write "a is a set of ***" for 

a is a set & Vx(x £ a — + x is a — ). 

Let f be a bounded unary function symbol and let a be a bounded term. 
Then we write 

foa for {(x, f(a(x))) : x E Doma}. 

Now we shall introduce the juxtaposition of a sequence of sequences. 
The following two function symbols locate the sequence, and the index in 
that sequence, corresponding to an index in the juxtaposition. 

19.28 Dtj. Locifz, s) = j <-> miny i < (52 Ln o s)(j), otherwise j — 0. 
We have 3j rhs (19.28): j < Lns. 

19.29 Dtj. Loc 2 (t,s) = i- (E Ln o 5 )(Loc I (z» - 1). 

19.30 Dtj. s* = {{i,y} : i G Setiog (s(Maxm (Ln o s))#s) & 1 < i < 
(^Ln os)(Ln£) &: y = s(Loc! (i, s)) (Loc 2 (t, s})}. 

19.31 Thm. s is a sequence of sequences — ► s* is a sequence & Lns* — 
(E Ln o s)(Lns). 

Proof. Suppose hyp (19.31). Clearly s* is a function. We have 

(E Ln s)(Ln s) < Sup (Ln o s) • Ln 5 = Ln (s(Maxm (Ln o s))) • Ln s < 
Log (s(Maxm (Ln o 5))) ■ Log s = Ln (,s(Maxm (Ln o s)) # s) 
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by (14.20), and so Vt(i is in the domain of s* <-» 1 < t < Ln os)(Lns)). 
Thus (19.31). 

19.32 Def. (x) = 

Now we introduce substitution and simultaneous substitution. 

19.33 Def. Sub{u,x,v) = {(i,y) : i € Domu & ({«(»)> ^ x ~* V = («(*))) 
& «u(t)>=z-y = *)}*. 

19.34 J?c/. Ssub(u,u;,s) - {(i\y) : i E Domu & -"3j(l < j < Lnw & 
{«(«)) = u/(j) y = («(*))) & Vj(minj (1 < j < Lnw & (u{i)) = wO) 

* = *(»))}*■ 

19.35 Def. u\i,j\ = u(t + k - 1)) : k e {k G Domu : 1 < jfc < j-t + l}}. 

19.36 Def. v occurs in u ^ 3z3j(l < i < j < Ln u & v = u[i,j}). 

19.37 77im. v occurs in u -+ v < w. 

Proof. Suppose i> occurs in w. There exist i and j such that 1 < i : < 
j < Ln u & t> = u[i,j]. Let 

/ = {{z,tt>) : z £ v & w = (i + Proji 2 l,Proj 2 z)}. 

Then we have Vz(z e u -+ z < f{z)) by (16.19). By (12.19) we have v < u. 
Thus (19.37). □ 

Notice that now that we have bounded replacement, we can dispense 
with FS (Metatheorem 12.1) and use (12.19) instead. 

The proof of (19.37) relies on the fact (16.19) that (x,y) is increasing 
in both x and y. This property fails for the usual set-theoretic definition 
of ordered pair — it takes a sudden dip when x — y. The result (19.37) will 
often be used tacitly in arguments by BLNP. 

19.38 Thm. u is a sequence &; 1 < % ' < Ln u — > u\l, i — l] * u\i + 1, Ln u] < u. 
Proof. Suppose hyp (19.38). Let v = u\l,i - lj * u\i + l,Lnu] and let 

/ — {(z, w) : z G v & (Proji z<i-l—>w = z)&z 

(i < Projx z -> w = (Proji + l,Proj 2 z))}. 

Then we have \/z(z E v z < f(z)) by (16.19). By (12.19) we have v < u. 
Clearly v ^ u, so v < u. Thus (19.38). 
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19.39 Thru, w occurs in v & v occurs in u — > w occurs in u. 

Proof. Suppose hyp (19.39). There exist t, j, and / such that 
u[i,j] & w — v[k,l}. Let t'i = i + k - 1 and let j Y = i + I — 1. 
w = u[t'i,ii]. Thus (19.39). 

19.40 Z?e/. Reverse u = {{*, w(Lnu + 1 — i)) : i G Domu). 



Chapter 20 
Cardinality 



A set has to be small in three ways: the formula, describing it must 
be bounded, there must be a bound on its elements, and there must be a 
logarithmic bound on its cardinality. We elaborate on this statement in 
this chapter and the next. 

20.1 Def. f is injective +->■ \fx\/y(x G Dom f h ye Dom / & x ^ y — ► 

/(*) / /(»))■ 

We use the abbreviations "a is an injective sequence" for "a is injective 
& a is a sequence", and "a is an injective sequence of ***" for "a is injective 
&l a is a sequence of ***". 

20.2 Def. u is an injection into a <-+ u is an injective sequence & Ran u C a. 

20.3 Thm. u is an injection into a — > Ln u < Log a. 

Proof. Suppose 3u3a-i(20.3). By BLNP there exist minimal such u 
and a. Clearly ti / 0. Let a x — {x e a : x ^ u(Lnu)}. Then 2 • a x < a 
by (10.20), and Chopw is an injection into a 1? so LnChopw < Log a x and 
hence Lnu < Log a, a contradiction. Thus (20.3). 

20.4 Def. Card a = n -e-> min n Vu(u is an injection into a ~> Lnu < rc). 

We have 3n r/is (20.4): n < Log a, Ln u < Log a, Suptt < a. The 
existence condition holds by (20.3) and BLNP, and the uniqueness condition 
is obvious. 
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20.5 Thm. Card a < Log a. 
Proof. By (20.3). 

20.6 Thm. 3u(u is an injection into a & Lnu = Card a). 
Proof. From (20.4). 

20.7 Thm. x E a &z a\ = {y E a : y ^ x) — > Card a — Card a\ -H 1. 

Proof, Suppose /it/p(20.7), suppose 1: u is an injection into a, and 
suppose 2: 1 < j < Ln « &; u(j) = x. Let 

d = {(t, y) : i G Dom u&l<i<Lnu-l& 

(* < i -»■ y = «(«)) & (i < * y = + !))}■ 

Then v is an injection into and hence Ln u < Card a! , so that 3: Lnu < 
Cardai + 1. Thus (2) -> (3). Suppose 4: Vj(l < j < Lnu u(j) ^ x). 
Then u is an injection into a iy so that Lnu < Cardaj. Thus (4) — * (3), 
and thus (1) -> (3). Therefore Card a < Carda L + 1. By (20.6) there 
exists u.j such that Ui is an injection into a 2 & Lnui = Cardaj. Let u — 
Ui U {{Ln Ui + 1, x)}. Then u is an injection into a and Lnu = Card a\ + 1, 
so Cardai + 1 < Card a. Thus (20.7). 

20.8 Def. Bda = Maxx(z < a & x G a). 

20.9 Def. Expcard(x,a) — Explogfnfx, a) (Card a). 

20.10 Thm. Expcard(x,a) = x Carda . 
Proof. By (20.5). 

20.11 Thm. a is a set -* a < Expcard(730 • (SPBda) 2 ,a). 

Proof. Suppose 3a~^ (20.11). By BLNP there exists a minimal such a. 
Clearly a / 0, so there exists x such that x G a. Let a\ — {y G a \ y ^ x). 
Then o, < (730 • (SPBdaj) 2 ) | Card a. But a < 730 ■ SPaj • (SPx) 2 by 
(16.2) and (16.1), so that 

a < (730 ■ (SPBda) 2 ) • (730 ■ (SP Bd a) 2 ) Card ai = 
(730- (SPBda) 2 ) Carda 
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by (20.7). This is a contradiction, and thus (20.11). 

20.12 Thru, f is a function Card / = CardDom/. 

Proof. Suppose 3/-i(20.12). By BLNP there exists a minimal such /. 
Clearly / ^ 0, so there exists z such that z 6 /. Let a — Dom/, let 
/i = (t 6 / : t ^ z}, and let ai — {5 £ a : s ^ Projjz}. Then fi is a 
function, Dom f\ = a l5 and /1 < /, so Card j\ — Cardc^. But by (20.7) we 
have Card / = Card /j + 1 and Card a = Card a! -+- 1, so Card / = Card a, 
a contradiction. Thus (20.12). 

20.13 Thru, a n b = -> Card (a U 6) = Card a + Card 6. 

Proof. Suppose 36^(20.13). By BLNP there exists a minimal such 6. 
Suppose -^3x x G b. Then a U b = a and Card 6 = 0, so con (20.13), a 
contradiction. Thus there exists x such that x £ 6. Let &! — {£ 6 6 : t ^ x). 
Then a n ^ = 0, so Card (a U fcj) = Card a + Card 61 . By (20.7) we have 
Card (a U b) - Card [a U 6j) + 1 and Card 6 = Card 6 2 + 1, so con (20.13), a 
contradiction. Thus (20.13). 

20.14 Thru. 3c(c is a set & 

Vz(z £ c «-+ 3x3y(x £ a &l y G b &: z — (x,y))) & 

Card c = Card a • Card b & 

c < ExplogfK ■ (Max(Bd a, Bd b))\ a # 6)). 

Proof. Suppose 36-^(20.14). By BLNP there exists a minimal such 6. 
Suppose ^3y yo £ & a nd let c = 0. Then (20.14), a contradiction, and thus 
there exists y such that y G 6. Let 61 = 6 6 : < / y }- Then there 
exists Ci such that scopes (20.14) c i,[c 1 6 1 ]. Let / = {{x,y } • x E a} and let 
c = Ci U /. Now c 1 n / = 0, so we have Card c = Card a • Card 6 2 + Card / = 
Carda • Card b x + Card a - Carda ■ Card6 by (20.13), (20.12), and (20.7). 
Clearly c is a set and scopes (20.14). Let k = (Max(Bd a, Bd b)) 4 . By 
(16.3) we have Bd c < 5 ■ (Max(Bd a, Bd 6)) 2 , so that 

c < (730 ■ 25 ■ Jfc) t Card c = (K • k) ] (Card a ■ Card 6) < 

(K-fc) T (Loga-Logfr) = (K • Jfc) |Log(a#6) = Explog(K ■ k,a#b) 

by (20.11), (20.5), and (14.20). Therefore we have (20.14), a contradiction, 
and thus (20.14). 
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20.15 Def. a x b = c <-> c is a set &; Vjefz Gc^ Ex3y(x Go & y G 6 & 

* = <*,»»)• 

The uniqueness condition holds by (12.2) and the existence condition 
and boundedness hold by (20.14). 

20.16 Def. Occu = Ran{<M) : k e Domu x Domv & 3i3j{l <i<j< 
hnu & k — & u[*\y] = 

20.17 Thm. v occurs in u +-* v £ Occw. 
Proof. From (20.16). 

20.18 Thm. f is a function & a = Dom/ — ► 
/ < Expcard(K • (SPMax(Bd a, Sup /)) 4 ,a). 

Proo/. Suppose hyp (20.18). It follows from (20.12) and (20.11) that 
/ < (730-(SPBd/) 2 ) t Card a, so by (16.1) and (16.3) we have con (20.18). 
Thus (20.18). □ 

If x occurs in A only in parts of the form 3x(x is a function & B) — or 
more generally, if A is equivalent to the formula obtained by replacing each 
part of A of the form 3xB by 3x(x is a function & B) — and if we have 

A: Dom x < a, Sup x < b, 

then it follows from (20.18) and (20.5) that we have 

A:x < Explog(K • (SP Max(a, b)) 4 , a). 

Similarly, if x occurs in A only in parts of the form 3x(x is a set &; B) — or 
more generally, if A is equivalent to the formula obtained by replacing each 
part of A of the form 3xB by 3x(x is a set &; B) — and if we have 

A : Bd x < a, Card x < Log b, 

then it follows from (20.11) and (20.5) that we have 

A:x < Explog(730- (SPa) 2 ,b). 

In showing a formula to be bounded, we will usually write one of the former, 
leaving the bound on x to be inferred. 

The following result shows that if we have a function r on a set (think 
of r as a ranking function), then we can enumerate the elements of the set 
in such a way that those of lower rank come first. 
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20.19 Thm. a is a feet — ► 3u(u is an injection into a & Ranu = a & 
ViV/(l < i < Lnu & 1 <i < Lnu & r («(«)) < r(u(») -> t < j)). 

Proo/. We have (20. 19): Lnu < Log a, Supu < a by (20.3). Suppose 
3a~i(20.19). By BLNP there exists a minimal such a. Clearly a ^ 0. Let 
r — {z e r : Proji-z 6 a) and let xj — Maxmr . Then x x £ a. Let 
ai = {t € a : t ^ Xi}. By the minimality assumption there exists iij such 
that scope 3u (20.19) ua [u 1 a 1 J. Let u = u x U {{Ln u x + l,x)}. Then (20.19), a 
contradiction, and thus (20.19). 

20.20 Def. Enumer(a,r) = u +-» min u scope 3u (20.19). 

We have Burhs (20.20): Lnu < Log a, Sup u < Bda. The existence con- 
dition holds by (20.19) and BLNP, and the uniqueness condition is obvious. 

20.21 Def. Enuma = Enumer(a,0). 



Chapter 21 
Existence of sets 



Metatheorem 21.1 Let Q'\ be the current theory, let U be an extension 
of Q'l, let A be a bounded formula of U, and let a and b be bounded terms 
of U not containing x or y. Then the following is a theorem of U: 

SET. Vx(A — x < a) & Vy(Vx(x £ y — > A) — >- Cardy < Logb) -> 
3y(y is a set & Vx(x 6 y <-» A)). 

Demonstration. We prove (SET) in U as follows. Suppose Ziyp(SET). 
Write q for 

y < Explog(730 • (SPa) 2 ,b) & y is a set & Vx(x Ey -» A), 

and let y — Maxyct. Clearly ct y [0], so by MAX we have a. Suppose 
A & x ^ y and let yi = y U {x}. (Here \i is distinct from x and y and 
does not occur in A, a, or b.) By (20.11) we have a y \yi\. a contradiction, 
and thus Vx(x Gy^A). Thus (SET). □ 

We have developed a certain amount of set theory, but it i? only a small 
portion of Cantorian set theory; see Figure 21.1. Different mathematicians 
who study the foundations of mathematics incorporate different portions 
of set theory into their metamathematical belief system. Platonists discuss 
whether measurable cardinals exist, but they believe in R t . In some sense 
intuitionists believe in us while finitists believe only in the elements of R w , 
though it is difficult to make a strict comparison. 
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The ordinals are depicted on the vertical axis, and the portion of the figure 
lying strictly below the horizontal line through the ordinal a depicts the 
set R a of all sets of rank < a. Here i is the first inaccessible cardinal and 
m is the first measurable cardinal. The figure is not drawn to scale. 

Figure 21.1: Cantor's Paradise 
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Set theory is abstract, but abstract beliefs affect concrete actions. Some- 
one who believes in R\ would consider it a waste of time to try to produce 
a contradiction from the axioms of ZFC; similarly for i2 w . 2 and Zermelo's 
original axiomatic set theory with separation but without replacement; and 
similarly for R^+i and Peano Arithmetic. 

To a nominalist it is clear where to draw the line separating the real 
from the speculative: i2 5 , which is a system of 65536 objects, exists — but R e , 
with its 2 -ft 5 members, is only a formal construct. 



Chapter 22 

Semibounded replacement 



This chapter is a digression, and I do not intend to use it in the sequel 
except in occasional remarks. The semibounded replacement principle dif- 
fers from the bounded replacement principle of Chapter 17 in that 3yD is 
no longer required to be bounded, though D itself is. 

Metatheorem 22.1 Let D be a bounded formula of Q\ such that Zi, . . . , x v 
art the variables distinct from x and y occurring free in D. Consider the 
formula 

SBR. a is a set &: \fx{x Gfl-> 3yD) — -» 

3f(f is a function & Dom / = a &; Vx(x € a — » D v [/(z)])). 

Then Q' 4 '[(SBR)] is interpretable in Q\. 

Demonstration. Let Di be min tf D. We want to construct the function / 
with domain a such that for x € a we have f(x) = y if and only if T>\. How 
do we know such a function exists? Write f[re] for 

VaVxi • • • \fx v {a is a set & Card a < n Sl \fx{x tc-> 3yD) — > 

3f{f is a function k. Dom / = a & Vx(x Eo-» Di)))- 

We claim that ind n <;{n\. Clearly f[0]. Suppose 

f[n] &; a is a set &; Card a = n-f 1 & Vx(a: € a — + 3yD). 
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There exists z such that 26 a. Let a = {t € a : t ^ z}. Then there 
exists /o such that / is a function & Dom / = a & Vxfx 6 a -> 
Di). Since z G a we have Bit? D,„[zti;], so by BLNP there exists w such that 
Dije V [«u;]. Let / = / U {(2,11;}}. Thus f[n] — ► f[n + 1], and the claim is 
established. 

Since £ is inductive, we can form f 4 and apply SREL of Chapter 15. 
Then we have f 4 [a] — ► f 4 [Card a], and so f 4 [a] — ► f [Card a], since Card is a 
bounded function symbol. Therefore we have 

£ 4 [a] &; a is a set & Vx(x € a — ► 3yD) — * 

3/(/ is a function &: Dom / = a & Vx(x 6 a — ♦ Di)) 

and a fortiori 

1. £ 4 [<z] & a is a set & Vx(x e a -* 3y(f 4 [y] & D)) -»■ 
3/(/ is a function & Dom / = a & Vx(x E a — > D^). 

Suppose hyp(l). Then there exists / such that scopes f con (1). By 
(20.18) we have 

/ < Expcard(K-(SPMax(Bda,Sup/))V). 

But Sup / = /(Maxm /). Let z = Maxm /. Then z e a, so 3u% 4 [il>] & 
D xy \zw}), so there exists w such that f 4 [w] & D 121/ [zuj]. That is, C 4 [/( 2 )] 
and so f 4 [Sup /]. Consequently we have f 4 [/], and thus 

2. f 4 [a] & a is a set & Vx(x £a-> 3y(f 4 [y] &: D)) — ► 
3/(c 4 |/] & / is a function & Dom / = o & Yx(x D)). 

But (2) is equivalent to the relativization of (SBR) by f 4 . 

Therefore we have an interpretation I of QJ[(SBR)] in QJ[ constructed 
as follows. The universe Uj of I is given by \J\n *-> f 4 [n]. For each bounded 
symbol u of the theory, Ui is u. For each unbounded symbol u of the theory, 
uj is the symbol whose defining axiom is given by the relativization by £ 4 
of the defining axiom of u. □ 

We can always introduce a function symbol by means of the defining 
axiom 
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SBRD! {(x,y) : x e a & mint, D} = / f is a function & 
Dom / = a & \/x(x Eo-» (min y D)y[/(^)]), otherwise / = 1, 

even if D is unbounded, since the uniqueness condition holds. If D is 
bounded and we have SBR, such defining axioms are useful. 

The theory obtained by adjoining all axioms of the form (SBR), with 
D bounded, is locally interpretable in Q, but we will continue to work only 
in extensions by definition of Q 4 . 



Chapter 23 
Formulas 



Now we are ready to begin to investigate which results of fmitary math- 
ematical logic can be established predicatively. We will follow the presen- 
tation in jSh] very closely. See [Sh,§2.4] in connection with this chapter. 

It will be convenient to enlarge our stock of variables. We also let A, 
J5, C, and D possibly with 0, 1, 2, ... as a subscript — be variables, and if 
x is a variable we let x' be a variable. The notion of alphabetical order is 
understood to be suitably redefined, with the relative order of the old vari- 
ables being unchanged. Generally speaking, our notation in arithmetizing 
syntax will correspond to the notation we have been using, following [Sh], 
for metamathematical discussion, and we will often use primed variables to 
suggest sequences of expressions, but formally all variables remain on an 
equal footing. 

We will introduce predicate symbols arithmetizing the syntactical no- 
tions of variable, predicate symbol, formula, etc. There should be no con- 
fusion between the formal use of these predicate symbols and the informal 
use of the same terminology in talking about expressions. 

Our first task is to introduce the various kinds of symbols. 

23.1 Def. X n = «2,n». 

23.2 Def. x is a variable <->- 3nx = X n . 

23.3 Def. F n , m = ((3,{n,m))>. 

23.4 Def. f is a function symbol <-> 3n3m / — F„ im , 
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23.5 Def. P n , m = «4,(n,m))>. 

23.6 Def. p is a predicate symbol <-> 3n3rap = P n>m . 

23.7 Z?e/. ~= {{5,0}). 

23.8 Def. V = <{5,l)>. 

23.9 £)e/. 3 = {(5,2)}. 

23.10 Def. = - P 2]0 . 

23.11 Def. u is a symbol <-> u is a variable V u is a function symbol V u is 
a predicate symbol Vu = ^Vu = VVu = 3. 

We will tacitly use the theorem that these disjuncts are mutually exclu- 
sive. 

23.12 Def. u is a logical symbol «-> u is a variable V u = ~ V u — ~ V 
u = v V u = 3. 

23.13 Z>e/. u is a nonlogical symbol «-> w is a symbol & ->(u is a logical 
symbol) . 

23.14 Z?c/. e is a constant «— * 3m e — Fo w . 

The index of a symbol tells how many arguments it takes: 

23.15 Def. Index u = n *^ 3rnu = F n , m V 3m if = P nm V (u - ^ & n = 1) 
V (w = V & n = 2) V (u = 3 & n = 2), otherwise n = 0. 

23.16 i^e/. u is an expression ^ u is a sequence &; Vi(l < i < Lnw — >• 
(w(i)) is a symbol). 

23.17 TVim. u is a symbol +-> u is an expression &; Ln« = 1. 

Proof. Suppose u is a symbol. By inspection of the denning axioms, 
u is a sequence and Lnu = 1, so that u = (u(l)) and u is an expression. 
Thus Iks (23.17) -+ rhs (23.17). The converse is clear. □ 

Next we want to arithmetize the notion of a term. The usual definition 
is a generalized inductive definition: an expression is a term in case it is 
a member of the smallest set of expressions containing the variables and 
closed under the application of £/-ary function symbols to lA-tuples from the 
set, for all v. We can relativize this definition to the set of all expressions 
occurring in a given expression, because to see whether an expression is 
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a term it is not necessary to look beyond the expressions occurring in it. 
This is a pattern that we will follow on several occasions. 

23.18 Def. Terms u = Mins(s < Occ u & (l) & (2)), where 

1. Vi(x G Occu & x is a variable — ► iE«), 

2. V/W(/ is a function symbol & is a sequence of expressions & 
Index / = Lni/ & Rani/ C« & / * «'* G Occ u f * v'* G s). 

23.19 Def. u is a term <-> u G Terms u. 

23.20 TTtm. v occurs in u — ► Terms v C Terms u. 

Proof. Suppopse u occurs in u and let Si = Terms v n Terms u. Then 

it follows that scopeMin (23.18) su [«iv], so Terms v < si < Terms v. Thus 
(23.20). 

23.21 Thm. a is a term — > Vi(l < t < Lna — »■ * s a variable V (a(t)) 
is a function symbol). 

Proof. Suppose a is a term and let 
si = {u G Terms a : con (23.2l) a [u]}. 

Then (23.18) flU [sja], so Si = Terms a. Thus (23.21). 

23.22 Thm. a is a term a is a variable V 3f3a'(f is a function symbol 
& a' is a sequence of terms Sz Index f — Lna' & a = f * a'*). 

Proof. Suppose a is a term and let 

Si = {u G Terms a : rhs (23.22) a [u]}. 

Then scope Min (23.18) au [s 1 a], and consequently we have Sj = Terms a. Thus 
Ihs (23.22) -» r/i5 (23.22). Conversely, suppose (23.22). Clearly a is a 
variable — > a is a term, so suppose scopes (23.22). By (23.20), Ran a' C 
Terms a. Thus a is a term, and thus (23.22). 

23.23 Thm. Terms u = {a G Occ u : a is a term}. 

Proof. Let s — {a G Occu : a is a term}. Then scope^\ n (23.18), so 
Terms u C s. Suppose a G s. Then a G Terms a, so a G Terms u by (23.20). 
Thus s C Terms u, and so (23.23). 
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23.24 Thm. e is a constant — ► e is a term. 

Proof. Suppose e is a constant. Then scope 3a t (23.22) / o »[e0], and thus 
(23.24). 

23.25 Def. A is an atomic formula +-* 3p3a'(p is a predicate symbol & a-' 
is a sequence of terms &; Indexp=Ln<z' &; j4 = />*a'*). 

23.26 Z>e/. Formulas u = Mins(s < Occ u & (1) & (2) & (3) & (4)), 
tf/iere 

1. VA(A G Occ u & A is an atomic formula — *■ j4 G s), 

2. VA(A 6 5 & =r * A € Occ u * A € s), 

3. WlVtf^ es&Bes&va*5_6 0cctt-^V*yl*Be6), 

4. \/Aix(A £ s & x is a variable & 3 * x * A E Occ u — > 3 * x * A E s). 

23.27 £>e/. u is a formula h«£ Formulas u. 

23.28 77m*. u occurs in u — * Formulas v C Formulas u. 

Proof. Suppose i> occurs in w and let s x = Formulas ufiFormulas u. Then 
scopej Ain (23.2G) au \siv], so Formulas v < si < Formulas v. Thus (23.28). 

23.29 Thm. A is a formula — > .4 is an expression. 
Proof. Suppose A is a formula and let 

S\ = {u € Formulas .4 : con (23.29)^ [u]}. 

Then scopeMm (23.26) au [si A], so s 1 = Formulas A. Thus (23.29). 

23.30 Thm. A is a formula — » A is an atomic formula V 3B(B is a formula 
& A = =<* B) V 3B3C(B and C are formulas & A = V * B * C) V 3x3B(x 
is a variable & B is a formula & A = 3 * x * B). 

Proof. Suppose A is a formula and let 

Sl = { u G Formulas A : Wis (23.20) A [u]}. 

Then 5ct?pe M in (23.26) ^[siA], so Si = Formulas A. Thus Ihs (23.30) — * 
r/zs (23.30). Conversely, suppose rhs (23.30). Clearly A is an atomic for- 
mula — ► A is a formula, so suppose £ and C are formulas & x is a variable 
& {A = ~^*B V A = V*B*C V A = 3*x*B). By (23.28) , A is a formula. 
Thus A is a formula, and thus (23.30). 
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23.31 Thm. Formulas u = {A G Occw : A is a formula}. 

Proof. Let s — {A £ Occ u : A is a formula}. Then scope Min (23.26), so 
Formulas u C s. Suppose A G s. Then ^4 G Formulas A, so A e Formulas u 
by (23.28). Thus 5 C Formulas u, and so (23.31). 

23.32 Def. u is a designator « u is a term V u is a formula. 

23.33 77im. u is a designator — > 3u'(u' is a sequence of designators &: 
Index (u(l)) = Lnu' & u = («(l)> * «'*). 

Proo/. By (23.22) and (23.30). □ 

We want to prove the uniqueness of w'; this is the formation theorem. 

23.34 Def. U\ and u 2 are compatible and u 2 are expressions &; 
3v{v is an expression &; [u 2 = Ui * v V u Y — u 2 * v)). 

23.35 TYim. «i and u 2 are compatible <-»■ u x and k 2 are expressions & 
VY(1 < t < Lnui &: 1 < i < Lnw 2 — > ui(i) — u 2 (z)). 

Proo/. Clearly Ihs (23.35) -> r/is (23.25). Suppose 1: rfes (23.35) & 
Ln ui < Ln « 2 , and let v — u 2 [Ln u x + 1, Ln tt 2 ]. Then u 2 = Wj * v, and thus 
(1) Ihs (23.35). Therefore rhs (23.35) & Lnu 2 < Ln«! //is (23.35), 
and so (23.35). 

23.36 Thm. ui * V\ and u 2 * v 2 are compatible u\ and u 2 are compatible. 
Proof. By (23.35). 

23.37 77*m. u * Vi and u * z; 2 are compatible — > and v 2 are compatible. 
Proo/. By (23.35). 

23.38 Thm. u' is a sequence & Vi(l <i'<Ln«'^ u'(i') ^ 0) -> Ln w' < 
(£u')(Lnu'). 

Proof. Suppose 3u'- (23.38). By BLNP there exists a minimal such u'. 
Clearly u' ^ 0. Then Ln Chop u' < (£ Chop u') (Ln Chop u'), so con (23.38), 
a contradiction, and thus (23.38). 

23.39 Thm. u' and v' are sequences of designators & Ln u' = Ln v' & u'* 
and v'* are compatible — ► v'. 

(See Lemma 1 of [Sh,§2.4].) Proof. Suppose (23.39). Write a for 
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-.(23.39) tt v[«ivi] & u\* occurs in u'* & 
v[* occurs in v'* & m = Lnu'j*. 

Observe that 

BtijBui a: Lnu\ < Lnu'*, Supu'j < u'*, 
Lnu; < Ln*;'*, Supt?; < v'* 

by (23.28) and (19.31). We have 3m3u\3v\ a (let u[ = u\ let v\ = v', and 
let m = Lnu'*), so by BLNP there exists m such that mm m 3u' 1 3v\ a, so 
of course there exist u\ and v[ such that a. Let n = LnuJ, so that also 
n = Lnv[. Let u' 2 = ChopUj and let v' 2 = Chopu'j. Clearly n^O. We have 
u i* = u i* * u \( n ) an< ^ ^i* = v 2* *v[(n). Since wj* and v[* are compatible, 
u' 2 * and v' 2 * are compatible by (23.36). Since n / we have Lnu' 2 * < 
m, so by the minimality assumption we have u\ — v[ and consequently 
u 2* = v 2* ■ By (23.37), u\(n) and v[(n) are compatible. Let w = u\(n) and 
let ^ = v \{ n )- By (23.33), there exist w' and 2' such that w* and z' are 
sequences of designators & Index (u(l)) = Law' & Index (v(l)) = Ln z' 
k u = (u(l)> * «/* & v = (v{l)) * z'*. By (23.36), and are 

compatible, so that u(l) = v(l). By (23,37), «/'* and z'* are compatible. 
Also, w/* occurs in «'* and 2'* occurs in v'*, and Ln w'* < m. By the 
minimality assumption, w' — z' and so u = v ; that is, ui(n) = v[{n). We 
have already seen that u 2 = v 2 \ that is, Chopu'j = Chopu' 2 . Therefore 
u\ — v[, a contradiction, and thus (23.39). 

23.40 Thm. [formation theorem) u is a designator — ► 3\u'(u' is a sequence 
of designators & Index (tt(l)) = Ln u' & u— (u(l)) * u'*). 

Proof. We have the existence by (23.33). Suppose u is a designator &; 
u\ and u' 2 are sequences of designators & Index = Ln u'j — Ln 

& u = {u(l))*u[* = {u(l))*u' 2 *. By (23.37), ui* and u' 2 * are compatible, 
so u\ = u\ by (23.39). Thus (23.39). 

23.41 Def. Arg u — u' <-+ w is a designator & u' is a sequence of designators 
& Index (u(l)) — Ln u f & u = («(1)) * m'*, otherwise u' = 1. 

The uniqueness condition holds by (23.40), and we have 3u' rhs (23.41): 
Ln u' < Ln it, Sup u' < u. 
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23.42 Thm. u and v are designators & u and v are compatible — * u = v. 

Proof. Suppose /iyp (23.42). Then (u) and (w) are sequences of desig- 
nators, Ln {u) = Ln (v) — 1, {«)* = w, and (v)* = v, so by (23.39) we have 
(u) = (v). Hence u — v, and thus (23.42). 

23.43 Thm. u is a designator & 1 < i < Ln it — ♦ 3/(t < j < Lnu & 
u[i,j] is a designator). 

(See Lemma 2 of [Sh,§2.4].) Proo/. Suppose 3u3t'-i(23.43). By BLNP 
there exist minimal such u and i. Suppose i — 1 and let j = Lnu. Then 
con (23.43), a contradiction, and thus i ^ 1. Let v' — Arg u and let v\ = 
(<u(l)))*r/. Recall (19.28) and (19.29), and let k = Locjfi,^) and let z'j = 
Loc 2 (z, ^i) . Then v'(k) < u and t"i < i, so by the minimality assumption 
there exists j\ such that i\ < ji < v'(k) & v'(A;)[ti, ji] is a designator. Let 
j = i+ii — Then u[i,j] = v'(k)[ii, ji\ and so con (23.43), a contradiction, 
and thus (23.43). 

23.44 Thm. (occurrence theorem) u is a designator & 1 < i < j < Lnu 
& u[i,j] is a designator — »• u[t,j] = u V 3fc3i'i3.7i(l < < LnArgu &: 
1 < t'i < Ji < Ln((Argu)(*)) & u[i,j] - (Arg W )(fc)[H,ii]). 

Proof. Suppose hyp (23.44). Suppose i = 1. Then u[z, j] and u are 
compatible, so u{i,j] = u by (23.42). Thus i — 1 — > con (23.44), so suppose 
i / 1. Let u' — Argu, let v' — {(u(l)}) * u', let k = Loci(i,u'), and let 
i\ — Loc 2 (?',v). By (23.43) there exists j\ such that z'i < j\ < Ln w'(fc) 
& u'(A:)[z 1 ,yi] is a designator. Then and u'(k)[ii, j\] are compatible, 

so u\i,j\ = u'(fc)[i'i,j'i] by (23.42). Thus i ^ 1 con (23, 44), and thus 
(23.44). 

23.45 Def. i is a bound occurrence of x in A <-* x is a variable & ,4 
is a formula & — x & 3£3j(i? is a formula & 1 < j ' < i < 
i + 2 + Ln£ < Ln,4 & j + 2 + Ln B] = 3 * x * B). 

23.46 Def. i is a free occurrence of x in u x is a variable &; u is a 
deignator &: = x &: is a bound occurrence of i in it). 

23.47 Def. x is bound in A <-» 3z'(t is a bound occurrence of x in ,4). 

23.48 £?e/. x is free in u «-> 3t(t is a free occurrence of i in u). 
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When we substitute terms for variables in a formula, we do so only 
for free occurrences of the variables, so we introduce the following denning 
axioms: 

23.49 Def. Subfr(u, x, a) = {(i,v) : i E Domu & (-i(t is a free occurrence 
of x in u) —> v — (u(i))) &: (i is a free occurrence of x in u — ► v — a)}* . 

23.50 Def. Ssubfr(u, x', a') = {{i,v} : i 6 Domu & < j < Lnx' & 
i is a free occurrence of x'(j) in u ) — »■ v — & V/(minj(l < j < Lnx' 
Sz i is a free occurrence of Jc'fj) in u) — »■ u = a'(j))}*. 

23.51 Def. u x \a] — v (1) V (2), otherwise v = 1, where 

1. w is a designator & i is a variable &: a is a term & v = 
Subfr(u, x, a), 

2. u is a designator &: x is an injective sequence of variables & a is 
a sequence of terms & Ln x = Ln a &; v = Ssubfr(u, x, a). 

23.52 TTim. u is a designator & ((i is a variable & a is a term) V 
(x is an injective sequence of variables & a is a sequence of terms & 
Lnx — Ln a)) — ► (u z |a] is a term <-> u is a term) & (w x j r a] is a formula 
<-» w is a formula). 

Proof. Suppose 3u3x3a~>(23.h2). By BLNP there exist minimal such w, 
x, and a. Let u' = Argu and let 

u\ — {(k,u'(k) x \a\) : k e Domw}. 

Then by the minimality assumption we have 

Vfc(l <k<Lnu'-^ con (23.52) u [u'(k)}}. 

Suppose («(1)) is a variable. Then Index = 0, so Lnu = 1 and 

u — (u(l)). But then u x \a] is a term, so con (23.52), a contradiction. Thus 
->((u(l)) is a variable). Suppose (u(l)) ^ 3. Then w x |g] = * u\* 

and so con (23.52), a contradiction. Thus (u(l)) = 3, so there exist y 
and B such that y is a variable & B is a formula & u = 3 * y * B, 
so that «'* = y * B. Suppose 1: (x is a variable &; x ^ y) V (x is a 
sequence of variables & y ^ Ranx). Then again u x [a] = (w(l)} * uj* 
and so con (23.52), a contradiction. Thus ~>(l). Suppose 2: x — y. Then 
Ujja] = u, so con (23.52), a contradiction. Thus ->{2). Therefore x is 
a sequence of variables $z y £ Ran x. Then there exists j such that 
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1 < j < Lnx & x(j) = y. Let X! = x[l,j — l] * x\j + l,Ln i] and let 
a x = a[l,j — i] * a[j + l,Lna]. By (19.38), x 2 < x and ax < a, so by the 
minimality assumption we have con (23.52) tiza [£?x 1 a 1 ]. Since x is injective, 
y ^ Ranxj. Hence u x \a] — 3 * y * f? Zl fai], so con (23.52), a contradiction. 
Thus (23.52). 

23.53 Def. a is substitutable for x in A «-> a is a term &: i is a variable 
&; j4 is a formula & VyVBViVyVAr(y is a variable &; y occurs in a & B 
is a formula Ac 1 < t < j < k < Ln A & A\i,k\ = 3 * y * B is a 
free occurrence of x in A)). 

23.54 Def. a' is simultaneously substitutable for x' in A <-> a' is a sequence 
of terms &; x' is an injective sequence of variables & Lnx 1 = Lnc' & 
Vz(l < i < Lnx' — + a'(i) is substitutable for x'(z') in ,4). 

Now we introduce some function symbols that enable us to write for- 
mulas more compactly. 

23.55 Def. ~A — C t-» A is a formula & C — ^ * A, otherwise C = 1. 

23.56 £>e/. = C <-> ^ and 5 are formulas & C = V * A * 5, otherwise 
C = 1. 

23.57 Z)e/. 3x^4 = C +-»• x is a variable & A is a formula & C = 3 * x * j4, 
otherwise C — 1. 

23.58 L>e/. VxA = ~3x~A 

23.59 Def. A~B = "AvB. 

23.60 Def. A&B = ~(A^~B). 

23.61 Def. A^B = {A^B)&{B~A). 

23.62 Def. a=b = C +-> a and 6 are terms & C = = * a * 6, otherwise 
C = l. 

23.63 £>e/. a^6 = ^(a=b). 

We need to express iterated disjunctions, implications, and conjunc- 
tions, associated from right to left. 

23.64 Def. Disj A' = {(«» : i G DomA' & (i = Ln A' w = v4'(Ln A')) 
& (i <Lni'^ii = V * ^'(i))}*. 
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23.65 Def. Impl A' = {{i,u) : i € DornA' & (t' = LnA' « = A'(LnA')) 
& (2 < LnA' « = V * - * A'(t'))}*. 

23.66 £>e/. ConjA' = {{*» : i e Dom A' & (i = Ln^' « = A'(LnA')) 
k (i < LnA' -+ u = ^* V * - * A'(z') *^)}*. 

f 23.67 TTim. .4' is a sequence of formulas & A' / & ,4 = A'(l) 
k B' — A'[2, LnA'] — > Disj A', Impl A', and ConjA' are formulas & 
(LnA' = 1 DisjA' = Impl A' = ConjA' = A) & (LnA' ^ 1 
Disj A' = AvDisj 5' & Impl A' = A~Impl£' k Conj A' = A&Conj £'). 

Proof. Suppose 3A'-i(23.67). By BLNP there exists a minimal such 
A'. Suppose LnA' = 1. Then DisjA' = Impl A' = ConjA' = (A)*, but 
A is a sequence and so (A)* = A, a contradiction. Thus LnA' ^ 1. 
Then Disj A' = V * A * Disj B' = AvDisj B\ and Impl A' = V * =i * A * 
Impl B' = ^AVlmpl = A ~ Impl £', and Conj A = ^*v*~*A*^* 
Conj B' — ~(A~ ~Conj f?') = A&Conj B'. This is a contradiction, and 
thus (23.67). □ 

Using this theorem, we see that if a is (Ai) * {A2) * ■•• * (A,,), then 
we have: a is a sequence of formulas Disj a = Aj VA2V • • ■ VA„ k 
Impl a = Ai~ A 2 ~ • • • ^ A v k Conj a = AikA 2 k • * ■ kA y . Unless the 
contrary is stated, a binary operation is associated from right to left when 
restoring parentheses; for example, A~B~C is A~(B~C). 

23.68 Def. u is variable-free <-+ u is an expression k Vi(l < i < Ln u — ► 
-((ti(z')) is a variable)). 

23.69 Def. A is a closed formula *-* A is a formula & Vi(l < t < Ln A — > 
is a free occurrence of (A(i)) in A)). 



Chapter 24 
Proofs 



We give a predicative arithmetization of the predicate calculus. We 
modify the treatment in [Sh,§2.6] by adopting tautological consequence as 
a rule of inference; see the conclusion of [Sh,§3.l]. 

24.1 Def. B is a substitution axiom <-> 3A3x3a(a is substitutable for x in 
A k B = A x \a\^3xA). 

24.2 Def. B is an identity axiom +-+ 3x(x is a variable & B — 

24.3 £>e/. Equals(a;',2/') = {{«', : i £ Domrr'}. 

24.4 Def. B is an equality axiom <-> Bx'3t/'(i' and t/ are sequences of 
variables & Ln 2:' = Ln y' & ((l) V (2))), where 

1. 3/(/ is a function symbol & Index / = Ln x' & 
B = Impl(Equals(x',y') * (/*x'*=/*^*»), 

2. is a predicate symbol & Index p — Lnx' & 
B = Impl (Equalsfz',*/) * 

24.5 De/. B is a logical axiom <-» 5 is a substitution axiom V B is an 
identity axiom V B is an equality axiom. 

24.6 Def. v is a truth valuation on it « Dorai; = Formulas u & Rani; C 
{0}U{1} & VB(~B e Formulas u — ► v(^B) — l~ v(B)) & V£VC(£vC 
G Formulas u -* u(5vC) — Max (v(B),v{C))). 

24.7 Z)e/. A is a tautology +-> A is a formula &; Vi>(t> is a truth valuation 
on A — > = 1). 
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We have rhs (24.7): Domv < Formulas A, Sup v < 1. 

24.8 Def. A is a tautological consequence of A' +-* A is a formula & A 1 is 
a sequence of formulas & Irnpl (A' * (A)) is a tautology. 

24.9 Def. C can be inferred from D by 3- introduction <->■ 3x3^435(2; is a 
variable &: A and B are formulas & is free in B) & Z? = A^B & 
C = 3x(A^B)). 

24.10 Def. I is a language / is a set of nonlogical symbols. 

24.11 Def. Nlsw = Ran {{i,v) : i 6 Domu & v = (u(t)) & v is a nonlogical 
symbol}. 

24.12 Def. a is a term of / +-+ a is a term & Nls a C /. 

24.13 Def. A is a formula of / <-»■ A is a formula & NlsA C /. 

24.14 Def. t is a theory <-» 3/3s(/ is a language &: 5 is a set of formulas 
of / & t = (/,«)). 

24.15 Z)e/. Lang£ = / t is a theory &; / = Projii, otherwise / — 1. 

24.16 Def. Axt = s <-+ i is a theory & s = Proj2 otherwise s = 1. 

The arithmetical nature of logic is revealed by the fact that Lang and 
Ax determine a theory. 

24.17 Def. D' is a proof in t of A <-> D' is a sequence of formulas of Langi 
& D' ^- & D'(LnD') - ,4 & Vi(l < z < Ln£>' A'(0 is a logical 
axiom V A'(i) £ Axt V A'(i) is a tautological consequence of A'[l,t — 1] V 
3j(l < j < i & -4'(0 can be inferred from A'(j) by 3-introduction)). 

24.18 Def! A is a theorem of t <-» 3D'{D' is a proof in t of A). 

Throughout this book I have been quibbling about exponential bounds 
being unsatisfactory, but here is a predicate symbol that is utterly un- 
bounded. This is the fascination of mathematics. 

24.19 Def. f\ s = {ze f : Pro.h z e s}. 

24.20 Thm. A' is a sequence of formulas & A' ^ & v is a truth valuation 
on DisjA' (v(Disj A') - 1 *-> 3i(l <i<Lni' & v(,4'( 1 ")) = 

Proof. Suppose 3A'3v^(24.20). By BLNP there exist minimal such A' 
and v. Let A = A'(i), let B' = 4'[2, LnA'], and let v = v\ Formulas DisjS'- 
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Clearly B' f 0, so we have con (24.20) A .„ [B'v ]. But by (23.67) we have 
v(DisjA') = Max (v (A), t>(Disj B')), so con (24.20), a contradiction, and 
thus (24.20). 

24.21 Thru. A' is a sequence of formulas & A' ^ & v is a truth valuation 
on Impl A' (v(ImplA') = 1 ~ 3*(1 < t < LnA' & v{A'(i)) = 0) V 
^(A'(LnA')) = 1). 

Proof. Suppose 3A'3v-^ (24.21). By BLNP there exists minimal such A' 
and v. Let A = A'(l), let B = A'|2,LnA], and let u = vj Formulas impiB'- 
Clearly B' ^ 0, so we have con (24.21)^„[5'v ]. But by (23.67) we have 
v{lmp\A') — Max(l - v(A),v(luip\ B')), so con (24.21), a contradiction, 
and thus (24.21). 

24.22 Thm. A' is a sequence of formulas &: A' ^ & f is a truth valuation 
on ConjA' -* (v(Conj A') = 1 Vi(l <j<Lni'^ i>M'(0) = 

Proof. Suppose 3A'3t;^(24.22). By BLNP there exist minima] such 
A' and v. Let A = A'(l), B' = A'|2, Ln A'}, and let % = ^| FormulasConjBf . 
Clearly B' ^ 0, so we have con (24.22) A > v [B'v }. But by (23.67) we have 
v(ConjA') = V (A) • f(Conj £?'), and so con (24.22), a contradiction, and 
thus (24.22). 

24.23 Thm. A' is a sequence of formulas & A is a formula — > ,4 is a 
tautological consequence of A' * (Impl (A' * (A))). 

Proo/. Suppose hyp (24.23) and let 5 = Imp] (A'* (Impl (A'* (A))) * (A)). 
Suppose i; is a truth valuation on 5 & v{B) — 0. Then, by (24.21), 
v(A) = 0, Vi(l < i < LnA' -> v(A'[i)) = 1), and t/(Impl(A' * (A))) = 1. 
But this contradicts (24.21), and thus B is a tautology. Thus (24.23). 

24.24 Thm. A' is a sequence of formulas & Ran A' C Occ C & v is a truth 
valuation on C — * 3v (u is a truth valuation on Impl A' &; Vi'(l < i < Ln A' 

- f„K(0) = »M'(0))). 

Proof. We have (24.24): Domi> < Formulas Impl A', Supi; < 1. Sup- 
pose E3A'-~i(24.24). By BLNP there exists a minimal such A'. Clearly 
LnA' > 2, Let A = A'(l) and let B f = A'[2,LnA'J. Then there exists 
Vi such that 

scope 3vti (24.24),^ 
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By (23.67), Impl A' = A^ImplB'. Let 

v - {{B,z} : B E Formulas Impl A' & 

(B = lmp\ A' -> z = Max(l - v(A), ^(Impl £'))) & 

(B= ^ 2 = 1 - u(A)) & 

(£ € Formulas A — > z = *>(-#)) & 

(B e Formulas Impl -» 2 = i>i (£))}. 

By the occurrence theorem (23.44), Dom^o = Formulas Impl A', and we 
have con (24.24), a contradiction. Thus (24.24). 

24.25 Thru. A is a tautological consequence of A' & B' is a sequence of 
formulas & Ran A' C Ran 2?' -+ A is a tautological consequence of B'. 

Proof. Suppose hyp (24.25) and suppose v is a truth valuation on 
Impl(£' * (A)) & u(Impl(£' * {A))) - 0. By (24.21), v(A) = and 
Vi(l < i < LnB' v(B (i)) = 1). Therefore Vt(l < i < Ln A' -* 
v(A'(i)) = l). By (24.24) there exists r such that v is a truth valuation 
on Impl (A' * {A)) & Vi(l < t < LnA' — > v {A'[i)) = l) & v (A) = 0. 
This contradicts (24.21), and thus con. (24.25). Thus (24.25). 

24.26 Thru. A is a tautological consequence of A 1 h Vz(l < i < Ln A' — »■ 
Z>"(f) is a proof in £ of A'(i)) & A is a formula of Langt — * D"* * {A) is 
a proof in t of A. 

Proof. By (24.25). □ 

Using semibounded replacement, we can prove 1: A is a tautological 
consequence of A' & Vz(l < i < Ln A' — * A'(z') is a theorem of t) & A 
is a formula of Lang t — * .4 is a theorem of t. The proof goes as follows. 
Suppose hyp(l). Using SBRD, let 

D" = {{i,D') : i G Dom A' & mm D ,(D' is a proof in t of A'(i))}. 

By (24.26) we have con(l), and thus (1). We need semibounded replace- 
ment to know that a sequence of theorems has a sequence of proofs! 



Chapter 25 

Derived rules of inference 



The material in [Sh, §§3. 2-3.5] is concerned with derived rules of infer- 
ence. Straightforward arithmetizations of all of these results are theorems 
of our theory. All of these derived rules of inference can be expressed by 
bounded function symbols. All of the induction arguments in these sections 
of [Sh] are bounded, with one exception — and an alternate predicative proof 
can be given for it. The reader who is willing to accept these conclusions 
should read on for a few paragraphs, where some notational conventions 
are introduced, and then skip the remainder of this lengthy chapter. 

Sometimes in the course of the proof of a theorem (£) we will write: 
define y = a. We do this only when y does not occur in a and a is a 
bounded term. Let Xi, . . . ,x M be the variables in a, in the following order: 
first those occurring free in (£) in the order of their occurrence in (£) and 
then the remaining ones in the order of their occurrence in a. Then we 
regard "define y = a" as an abbreviation for 

Def . y € X! . . . x^ = y ^ y = a. 

This is the denning axiom of a bounded function symbol y^. Within the 
proof of (£) after the introduction of the function symbol y^, we use y 
as an abbreviation for the term y^Xj ...x M . This device, especially when 
iterated, saves us from constantly having to display the arguments of the 
function symbols. The theorem (£) itself may contain function symbols of 
the form y f ; this may seem odd, but it allows us to introduce the defining 
axioms of the function symbols at the natural point in the exposition. 



115 



116 



25. DERIVED RULES OF INFERENCE 



Observe that if x and z do not occur in A, then 

MIND'. Minx A = z min z A x [z], otherwise z = 

is the defining axiom of a function symbol, since the existence and unique- 
ness conditions hold automatically. It may or may not be a bounded func- 
tion symbol, and if it is a bounded function symbol then its defining ax- 
iom (MIND') is equivalent to a defining axiom of the form (MIND). If we 
ever have occasion to use this notation to introduce a function symbol for 
which no claim is made that it is bounded, a "!" will indicate this, but 
the intention is to use (MIND') to save writing obvious bounds explicitly. 
Whenever a term of the form Minx A occurs, it is understood that the cor- 
responding defining axiom of the form (MIND') has been adjoined to the 
theory. 

If x occurs in A only in the part 3xB, then we write 
define x as in A 

for 

define x = Minx B. 

We write "define yi = ai, . . . , y v — a^" for "define yi = ai, . . ., and define 
y v — a,,". We write "define xi, . . . ,x„ as in A" for "define Xi as in A, . . ., 
and define x„ as in A". 

If we have formulas labeled /i for A < jj, < is, and terms a M for A < & < f, 
we write 

define y — a M in case (//), for A < fi < v 

for 

define y = Miny(((A) -> y = a A ) & •■■ & ({v) -> y = a w )). 

25.1 Def. D'\ A' h A <-> D' is a proof in (NlsA'* * A, Ran A') of A. 

25.2 Thm. D': A' h A & A is a formula of Lang* & Vt(l <t'<Ln4'-> 
C"(i) is a proof in t of A'(i)) -> C"* * D' is a proof in t of A. 

Proof. By (24.25). □ 
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Now we give some results on quantifiers, following [Sh,§3.2|. 

25.3 Thm. (^-introduction) A and B are formulas &: a; is a variable & 
^(x is free in A) -> D' 2Z3 (A,B,x): (A~B) h A~VxB. 

Proof. Define D' = (A~B) * {~B~~A) * {3x~B~~A} * (A~\/xB). 

25.4 Thm. (generalization) A is a formula & x is a variable — > 

Proo/. Define £>' = (A) * <~A~VzA} * {3:t~A~V:eA) * {VxA). 

25.5 JTim. a is substitutable for x in A — > D' 2b 5 (g, x, A): {A} h Aaja]. 

Proo/. Define £>' = (.4) * D' 2B4 (A,x) * (9xA) * (~A X \a] ~3x~A) * 
[\/xA^A x \a\) * {A x \a]).J2 

Notice that {A) and (VxA) are already contained in Z)^ 4 (A, x), but this 
redundancy makes the proof somewhat easier to read. 

25.6 Thm. (substitution rule) a' is simultaneously substitutable for x' in A 
- W^a'^A): (A) h A«\a']. 

Proof. Define 

y' = {{i,X a > +x > +A+i } : i E Domi'}, 

K = {{^A^-^y'^i-l}]) : i G Dom x' u {Lnx' + l}}, 
B'o = {(«,^ 25 5 (y'(0^'(0^o(0)) : *e Domxf, 

A; = {^P^i, 1]1> :tGDomy' U {Lny' + l}}, 
^ = {{z,^ 55 (a'W,y'(0,^(0)) rtGDomy'}*, 

Suppose hyp (25.6). We have Vi(l < x < Lnx' y'(z) is substitutable 
for x'(i) in A' (i) & a'fi) is substitutable for y'(i) in A[(i)), so by (25.5) 
we have B' : {A} h P and BJ: {£) h £„. |"a'"| ■ But B y >\a'\ = A x >\a'], so 
con (25.6) and thus (25.6). 

25.7 Def. A is an instance of A <-> 3z'3a'(a' is simultaneously substitutable 
for x r in A & A = A^^'D* 

25.8 Thm. A is an instance of A — * -D2 5 8 (A , A): {A) h A . 

Froo/. Define x' and o' as in (25.7), and define D' = D' 2l& (a\x\A). 

25.9 Z?e/. Exist x' = {(i, 3 * x'(t)) : i 6 Domx'}*. 
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25.10 Def. Alls' = * 3 * x'(i) Domx'}*. 

25.11 Thm. x' is a sequence of variables &; A is a formula — > Exist x' * A 
and All x' * A are formulas. 

Proof. Suppose 3a? -i (25.11). By BLNP there exists a minimal such x'. 
Clearly Lnx' > 2. Let xj = x'[2,Lnx']. Then Exist x\ * A and Allx'j * 
A are formulas, but Exist x f * A — 3x'(l) (Exist x\ * A) and Allx' * A = 
Vz'(l)(Allzi * A), so con (25.11), a contradiction. Thus (25.11). 

25.12 Thm. A is a formula & x is a variable — + D' 2 $ 12 (A,x): f VxA~A. 
Proof. Define £>' = <-A~3x-A) * (VxA~A). 

25.13 TTim. [substitution theorem) a' is simultaneously substitutable for x' 
in A — ► C5 513 (a',x', A): H A x »[a'l ~ Exist x' * A & 

Proof. Define 

5' = {(i, Exist x' [Lnx' - t + 2, Lnx'] * A~ Exist x'[Lnx' - i -f l] * A) : 
i G Domx'}, 

C' = B' * Z) 25 6 (a',x', A~Existx' * A), 

= {<t',L> 2512 (Allx'[z',Lnx'] * A,x'{i)}) : z G Domx'}*, 
D' = B' * D 25 6 (a',x', Allx' * A~A). 

Suppose hyp (25.13). Then B G Ran B' — ► 5 is a substitutuion axiom, so 
5': h A~Existx' * A. By (25.12) and (24.25), B' : h All x' * A~A. By 
the substitution rule (25.6) we have con (25.13), and thus (25.13). 

25.14 Thm. (distribution rule) A and B are formulas & x is a variable — * 
C' 2bl4 {A,B,x): {A^B} h 3xA^3x£ & 

D' 2hlA (A,B,x): <A~£) P VxA~Vx£. 

Proof. Define 

C = (A^B) * (£~3x.B) * (A~3x5) * <3xA~3x#), 
D' = D 2512 (A,x) * <VxA~A} * (A~B) * (\fxA~B) * D' 2b3 {\/xA,B,x) * 
(VxA~Vx5)'. 

25.15 Def. Free A = Enum {x G Occ A : x is free in A}. 

25.16 De/. Closure A - All Free A * A. 
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25.17 Thm. (closure theorem) A is a formula — ► C' 2bl7 (A): (A) ~ Closured 
& D' 2bl7 (A): {Closure A) f A. 

Proof. Define x' — Free A, 

C = (A) * {{i,D' 2BA {A\\x'[i+ l,Lnx'] * A,x'{i))} : i E Domx}*, 
D' = (Closured) * D' 25n (x\ x\ A) * {A). □ 

Now we take up the deduction theorem; see [Sh,§3.3]. 

25.18 Thm. B is a tautological consequence of B' & A is a formula & 
C = {(i,A~B'(i)} : i G DomB'} — > A^B is a tautological consequence 
of C. 

Proof. Suppose hyp (25.18), let C — Impl(C * {A^B)), and suppose 
v is a truth valuation on C. Suppose 1: v(B) = 1 V v(A) = 0. Then 
v(A~B) = 1, so v(C) = 1 by (24.21). Thus (l) -* v(C) = 1, so suppose 
v(B) = &: v(A) — 1. By (24.21) there exists v such that v is a truth 
valuation on Impl(£' * (B)) & V*(l <i<LnB'^ v {B'{i)) = v{B'(i))) 
& v (B) = v(B). We have v [lmp\(B' * £)) = 1, so by (24.21) there exists 
t such that 1 < i < LnB' & v (B'(i)) = 0. Hence v(B'(i)) = 0, so 
v(A~B'(i)) = 0, and again by (24.21), v(C) = 1. Thus v(C) = 1, thus C 
is a tautology, and thus (25.18). 

25.19 Thm. A and B are formulas & B': A 1 h -> 
^ 5 . 19 (A,B,B'): A'*<A>h£. 

Proo/. Define D' = (A) * £' * (B). 

25.20 77im. {^deduction theorem) A is a closed formula & 
B'\ A'*(A)^B^ D' 252G {A,B'): A' h A^B. 

Froo/. Define C = {(i,A^B'(i)) : i £ Dom B 1 }. We distinguish three 
cases: 

1. B'(i) € Ran A' V B'(i) is a logical axiom, 

2. B'(z) — A V B'(0 is a tautological consequence of B'jl,t — l], 

3. 3,7'3x3C3£)(x is a variable & C and D are formulas & -1(2: is free 
in D) & \ <j<i & B'(i)=C~£> & £'(1) = 3xC~D). 

Define j, 2, C, and Z? as in (3), and define 

D\ = <B'(i)> * 
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* D' z = (A^C~D) * (C^A^D) * 0xC~A~D) * (A~3xC^D), 
D' = D'p in case (//), for 1 < fi < 3, 
D' = {(i J Z)' ):ieDomfl'}*. 

Suppose hyp (25.20), and suppose 1 < i < LnB*. Observe that (3) — ► 
3xC^ A~D can be inferred from C~A~D by 3-introduction, since (3) 

-(x is free in A~D). Thus 1 < i < LnB' -> D' Q : A' * C"[l,t - 1] h C'(i'), 
and so con (25.20). Thus (25.20). □ 

How can one tell by looking at a finitary argument whether it admits a 
predicative arithmetization? A typical finitary argument, used to show that 
a certain kind of formula can be proved, introduces (perhaps implicitly) a 
ranking of formulas and reduces the proof for a given rank to the case of 
lower ranks, which are assumed to be already proved. To see whether such 
a reduction to previous cases can be constructed predicatively, we must 
examine the totality of previous cases and see if it is a set in the sense of 
our theory. There are three possible obstacles: 

i. A splitting of cases may arise, leading to an exponential (or worse) 
growth in the total number of previous cases. 

ii. There may be an exponential (or worse) growth in the size of the 
objects involved in the previous cases. 

iii. The formula that specifies the previous cases may be unbounded. 
Each application of the deduction theorem increases the length of a 

proof by a factor (which is < 4), so if we try to convert a proof of a formula B 
from a sequence A' of n closed formulas into a proof of Impl(j4' * (B)) by 
induction on n, as in [Sh,§3.3], the length will grow exponentially. Here we 
have an example of the obstacle (ii). This induction is unbounded, and we 
must find another argument. 

25.21 Thm. A' is a sequence of formulas & 1 < i < Ln A' — > Conj A ,c +A*{i) 
is a tautology. 

Proof. Suppose hyp (25.21) & v is a truth valuation on Conj A'^A'(i) 
& v(Conj A'~A'{i)) = 0. Then v(A'{i)) = and v{Con] A') = 1. But this 
contradicts (24.22), and thus (25.21). 

25.22 Thm. A' is a sequence of formulas &; A' ^ & A is a formula — *■ 
Impl(>l' * ( J 4))^(Conj A'~A) and (Conj A'~ A) ~Impl(^' * {A)) are tau- 
tologies. 

Proof. Suppose hyp (25.22), let C = Impl(^' * (A)), and let D = 
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Conj A'~A. Suppose v is a truth valuation on C^D & v(C^D) — 0. 
Then v(D) = and v(C) = 1. Therefore v(A) = and v(Con')A') = 1, 
so by (24.22), Vi(l < i < Ln A' -> v{A'{i)) = 1). By (24.21), v(C) = 0, a 
contradiction, and thus C~D is a tautology. Suppose v is a truth valuation 
on D^C & v(D^C) = 0. Then v(C) = and = 1. By (24.21), 

v(A) = and Vt(l < % < Ln^4' -+ w(^'(0) = !)• By (24.22), = 0, a 

contradiction, and thus D^C is a tautology. Thus (25.22). 

25.23 Def. Cases A' = {(«', Conj A'~A'(0) : i 6 Domi'}. 

25.24 Thm. A' is a sequence of formulas & B is a formula & 
5': Aq h Impl(i4' * (B)) -+ D' 2Z 24 (A', B, B'): A' * A' h £?. 

Proo/. Define D' = 4' *#'*<#). Suppose /n/p (25.24). Then con (25.24) 
by (25.23). Thus (25.24). 

25.25 Thm. (corollary to the deduction theorem) A' is a sequence of closed 
formulas & B': A' * A' h B 25 (^', £'): ^ h Impl^' * (£)) & 

CJ 5 25 (^',5 r ): A' h ConjA'~B). 

Proof. We distinguish two cases: 1. j4' = and 2. j4' 7^ 0. Define 
C' = ^ 5 20 (ConjA',Case Sj 4'*B'), 

z>; = B\ 

D' 2 =C* {(ConM'^£)~Impl(A' * {£))) * (lmp\{A' * <£))), 
£>' - in case (/*), for 1 < fi < 2. 

Suppose hyp (25.25). Then (l) -> con (25.25), so suppose (2). By (25.21), 
Cases A' * B': A' Q * (Conj A') h B. Then C": ^4' h ConM'~£ by the 
deduction theorem (25.20). By (25.22), D' 2 : A' Q h Impl(^' * (5)), and thus 
(2) con (25.25). Thus (25.25). 

25.26 Thm. e' is a sequence of constants &; x' is a sequence of variables & u 
is a designator — * (Ssubfu, e', a:') is a term <-»• w is a term) & (Ssub(w, e', x') 
is a formula ^ u is a formula). 

Proof. Suppose (25.26). By BLNP there exists a minimal such u. 
Let u' = Arg u and let 

u\ = {{i,Ssub(u'(t),e',z')) : 1 G Domu'}. 



Then by the minimality assumption we have 
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Vt(l < i < Lnu'j ^ con(25.26) u [u , 1 (i)}). 

Suppose (u(l)) is a constant. Then Index (u(l)) = 0, so Lnu = 1 and u = 
(u(l)). But then Ssub(u, c', r') is a term, so coti (25.26), a contradiction. 
Thus ->((u(l)) is a constant). Therefore Ssub(u, e', x') — {u{\)) * u[* and 
so con (25.26), a contradiction. Thus (25.26). 

25.27 Thm. e' is a sequence of constants & x' is a sequence of variables 
&; A is a tautology — ► Ssub(A, c', a:') is a tautology. 

Proof. Suppose hyp (25.27) and let A — Ssub(A, e', x'). Suppose is 
a truth valuation on A and let 

v = {<B,i;o(Ssub(B,e',x'))) : B G Formulas A}. 

Then v is a truth valuation on A, so f(A) = 1. Therefore v Q {A Q ) — 1 and 
thus Aq is a tautology. Thus (25.27). 

25.28 Thm. (theorem on constants) e' is an injective sequence of constants 
&: x' is an injective sequence of variables & Ln x' — Ln e' & A' is a 
sequence of formulas k, A is a formula & Rane' n Occ(A'* * .4) = & 
B': A' P A t .\e>] - DJ 5 28 (e', x\ A, B'): A' ~ A. 

Proof. Define 

y' - {{i,X e , +x , +A + B , +l ) : i G Dome'}, 

C = {(i,Ssub(J5'(y), C ',y')> : j E Domfi'}, 

Suppose hyp (25.28). Observe that Ssub^^fe'], e', y') = A z -[y'J. By 
(25.27), C: A'Y-A x >\y'}. Since \y') } v < \x'] — A, we have con (25.28) by 
(25.6), and thus (25.28). 

25.29 Thm. A and B are formulas & e' is an injective sequence of con- 
stants x' = Free A & Lni' = Lne' &; A' is a sequence of formulas 
& Rane' n OccfA'* * A * B) = & B': A' * (A^e'l) ^ I e 'l »> 
P 25 29 (^B,e',x',A',B'): A' h A^B. 

Proof. Define 

C' = D' 2S20 (A x ,\e'},B',A'), 

D' = C *D^ 2S (e',x\A^B,C<). 
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Then (25.29) by the deduction theorem (25.20) and the theorem on con- 
stants (25.28). □ 

Now we take up the equivalence and equality theorems, following the 
discussion in [Sh,§3.4]. This is a dull topic; Shoenfield remarks that it can 
be roughly summarized by saying that equivalent formulas and equal terms 
may be substituted for one another. 

We want to treat the notion of one formula being obtained from another 
by replacing some occurrences in it of formulas from a given sequence by 
the corresponding formula in another given sequence. We do this by means 
of another arithmetized relativized generalized inductive definition. 

25.30 Be/. Replacements (A, A u B', B[) = 
Min5(s < Formulas A x Formulas A i & 

VBVB 1 ({B, J & 1 > € Formulas/! x Formulas A x & ((1) V - -• V (5)) -> 
(B,Bi) e s)), where 

1. B = B U 

2. 3/(l</<LnJ3' & B = B'(l) k B l = B[(i)), 

3. 3C3Cj(B = ~C & £i = ~d & (C,C X ) e s), 

4. 3C3D3C 1 3D 1 {B = C\'D & B x = C 1 vD l & (C,^) e s & 

5.3x3B3C(x is a variable & B = 3xC & Bj = 3xCj & {C,d) € 5). 

25.31 Be/, replace^, Ai, ^ i and B are formulas & B' and B} 
are sequences of formulas & Ln B' = Ln B\ & 

{A,Ai) e Replacements^,^, B',B;). 

25.32 TVim. [distribution rule for equivalence) A and A\ are formulas & 
x is a variable — * C 25 32 (A, A\, x): (A+^Ai) h 3x J 4£^3xyli &: 
^ 5 .32MMi,i): {A^^i} h VxA^Vx^l 

Proof. Define 

C = (A^^i) (A^Ai) * C^^fA^^x) * (ax^^^x^!} * (Ai~A) * 
, 14 (j4, Aj,x) * (BxAj^BxA) * (3x^4*^3x^4!), 

D' = (A^Ai) * (A~^i) * Z?^ 5 . 14 (A, Ai,x) * (Vx^-Vx^!) * (A^ A) * 
D'^ 14 (A,A u x) * (Vx^^VxA) * {VxA^xAi). 

25.33 Be/. Equiv(B',B;) - {(/, J3'(/)«jBi(0> : J <E DomB'}. 
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25.34 Thru, (equivalence theorem) replace (A, Ai, B\ B[) — » 
jy KM (A,A u B\B\): Equivt^BJ) h A&A X . 

Proof. Define 

s = Ran {(2, Proj! s^Proj 2 -s) : Replacements^, Aj, B\ B\)}, 
r = {{i ,Lni ) : A) € s }, 
A' = Enumer(s , r). 

We distinguish two cases: 

1. 3x3C3Ci(x is a variable & (C, Ci) E Replacements (yl, 5', J5J) 

2. .(1). 

Define x, C, and as in (1), and define 

C[ = C25 32 C\, x), 
C{ = M'(i)>, 

C" = CJ, in case for 1 < < 2, 
D' = {{i,C) zieDomA'}*. 

Suppose hyp (25.34) and suppose 1 < 1 < hnA'. We have (1) — ► Cj: 
Equivf^',^) * A%i - 1) h by (25.32). We have (2) -> 4'(t) € 

Ran Equiv(£f', £?() V A'(i) is a tautological consequence of A'[l,i — l], so 
(2) -»- Cj: Equiv(F, BJ) * A[l,i - 1] h Thus con(25.34), and thus 

(25.34). □ 

Using semibounded replacement, we can prove replace( A, A u B', B[ ) &; 
V/(l </<Ln5'-> B'(l)&B\(l) is a theorem of t) -* is a theorem 

oft. 

25.35 77im. £? is a formula & x and y are variables Sz (x = y V ~^(y is 
free in 5)) -> L> 2535 (5, x, y): h 3xB&3yB x \y]. 

Proof. Define 

D' = (B x \y]^3xB) * (3yB x \y]^3xB} * <£J~3y£ji/l} * 
(3xB^3yB x \y\) * (3xB^3yB x \y]}. 

Suppose hyp (25.35). Then y is substitutable for x in £. Observe that 
B~3yB x \y] is a substitution axiom, since B = (^ [y]) y fx] . Thus (25.35). 

25.36 De/. replacei(A, Ai, Z>, Z>i) «-»■ A, A\, D, and .Di are formulas & 
3i3j(\ <i<j<LnA & D = A\iJ] & 

- A[l,z - 1] * A * + l,LnX]). 
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25.37 Thm. C G Formulas A & C l E Formulas A x 
Replacements (C, C l5 £?',i?J) C Replacements (^4, A x , B\ B[). 

Proof. Suppose hyp (25.37), let = Replacements (C, C lt B', B[), and 
let 5 = Replacements (j4, Ai, B', B[), so scope Mm (25. 30) A Al a [C, Ci, s n Si] 
and 5! < 5 D 5! < 6i. Thus (25.37). 

25.38 TViro. replace! (A, A u D, D x ) replace(A, A x , <£>), (Pj)). 

Proof. Suppose 3A3A\-> (25.38). By BLNP there exist minimal such A 
and A^ Clearly D ^ A. By the occurrence theorem (23.44), there exists 
k such that 1 < k < Index (-4(1)) & D occurs in (ArgA)(&). By the 
minimality assumption, 

replace((Arg A)(k), (Arg AO(fc), {D),{D 1 }). 

By (25.37) we have (25.38), a contradiction, and thus (25.38). 

25.39 Def. Ai is an immediate variant of A +-+ 3x3y3B(x and y are variables 
& B is a formula &: x occurs in A & y occurs in A x & 5 occurs in A 
&; (x = y V ^(y is free in B)) & replace! (A, Ai, 3xB, 3yB x \y])). 

25.40 Thm. A x is an immediate variant of A — + Z? 25 40 (-4i, A): P A^Aj. 
Proof. Define x, y, and £? as in (25.39) and define 

25.41 Def. A\ is a variant of A 3A'(A' is a sequence of formulas & 
l<LnA' <LnA & A'(l) — A & A'(LnA') = Ai & W(l<*<LnA' 

RanA'(i') C RaniuRanij & LnA'(z') = LnA) & Vz"(l<s<LnA' 
— ♦ A'(i + 1) is an immediate variant of A'(i))). 

We have rhs (25.41): LnA' < LnA, LnSupA' < LnA, Sup Sup A* < 
Max(Sup A, Sup A x ). 

25.42 77im. A' is a sequence of formulas & A' ^ -» A'(l)<~ A'(Ln A') is 
a tautological consequence of Equiv(A'[l, Ln A' — l], A'[2, Ln A'}). 

Proof. Suppose 3A'->(25.42). By BLNP there exists a minimal such A'. 
Clearly Ln A' ^ 1. Let A' = A'[l, Ln A' - 1]. By the minimality assumption 
we have (25.42),v[Ao]; that is, A'(l)^A'(Ln A' — 1) is a tautological conse- 
quence of Equiv(A'[l,LnA' - 2], A'[2, Ln A' - lj). But A'(l)«A'(Ln A') is 
a tautological consequence of 
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(A'(l)&A'{LnA' ~ 1)) * {A'(Ln A' - 1)&A' [Ln A')} , 
so con (25.42), a contradiction, and thus (25.42). 

25.43 Thm. [variant theorem) A\ is a variant of A — + 
D' 2 , 43 [A U A): OM^. 

Proof. Define A' as in (25.41) and define 

^ , = {(».^2B.4o(^ , (> + l)^ , (0)> : i'eDom^Lni'-l]}**^,). 

25.44 Thm. A is a formula & u is an expression — > £25.44(^4, u) is a variant 
of A & \fx[x £ Occu — > is bound in £25.44^ «)) ) & ^t 1 ' ^ Occu 

-> £25.44(^5 «) = £25.44(-4, v * u)). 

Proof. Define 

i' = Enum {1 € Dom A : j4'(i) e Ran u & (^4(z - l)) = 3), 
/ = {(kj) : A; G Domz' & ^[z'(fc) 4- 1, j] is a formula), 
C = {(k,A\i'{k) + l,i'(Jfc)l) : fc 6 Dom*'}, 
J = {{k,(A(i'(k)))) : k ebomi'}, 
s = {x € Occu : 2 is a variable), 
y' = {<*, X A+s+k ) -.keVomi'}, 
1. 4' - Min^LnvT = Lni' + 1 & ,4'(l) = ,4 & 
VJk(l < k < Ln t' + 1) = 

^(ft)[l,t'(fc) - 2] * 3 * y'(k) * C'(k) x>{k) \y'(k)] * ^WU'W + l,Ln^])), 
£' = A'(LnA'). 

Suppose /ii/p (25.44). Then scope Um (1): Ln j4' < Ln z' 4- 1, Ln Sup A' < 
Ln A, Sup Sup A' < Max (Sup A, Sup y'). Suppose 1 < k < Lni'. Then it 
follows that A'[k + 1) is an immediate variant of A'[k). Thus B is a variant 
of A, and thus (25.44). 

25.45 Thm. [symmetry theorem) a and 6 are terms — ► 
D 25 45 (a,6): P a=&£3&:=a. 

Proof. Define 

D' = {Xo= X\~ +Xo — Xq = Xq^Xi — Xq) * (Xo^Xo) * 
(Xo^^i^Xj^Xo) * D 25 _ 8 (a=&~&=a,X =Xi=*Xi = X ) * (a=6^6=a) * 
Dj 5>8 (6=a~a=6,Xo=Xi^Xi=Xo) * (f>=a~a=&) * (a=6«6=a). 

25.46 Thm. a is a term — + D' 2546 [a): h a— a. 

Proo/. Define D' = (X =X ) * D 25 g (a=a, X =X ) * <a=a). 
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25.47 Thm. f is a function synbol & c' and c[ are sequences of terms & 
Index / = Lnc' = Ln c\ -> 7 (/, c', <): Equals(c', c\) h f*c'*~f*c\*. 

Proof. Define 

x' = {{i,X t -)t € Dome'}, 

4 = {{i,X Lne t+i : * G Domci}, 

Dq = Impl(Equals(x',xi) * </*x'*=/*xi*)), 

D' = EquaI B (c',ci) * (D ) * D' 2b6 {c' * c\,x' * x[, D Q ) * (f*c'*=f*c\*). 

25.48 77im. p is a predicate symbol & c' and c'j are sequences of terms & 
Index p — Lnc' = Ln c[ — > £>2 5 48 (p, c', c'J: Equals(c', c'J h p*c'*£+p*e' 1 *. 

Proof. Define 

x' = : t G Dome'}, 

x\ = {(i,X Lnc > +i ) : i G DomcJ}, 

D = Imp](Equals(x',xi) * (p*x'*~p*xi*», 

D\ - Equals(c',ci) * (Do) * L>' 25 6 (e' * c'^x' * x\,D ) * <p*c'* -p^*}, 
^2 = {(hD' 2 , 4h (c'(i),c\(i))) : i E Dome'}*, 
D' = £>; * (^Jcvjcic'] * {p*c'*«p*ci*>. 

25.49 Def. Substitutions^, ui, a', a'j) = Mins(s < Occ u x Oqcu\ &: 
VfVv 1 ((i?, vi) E Occ u x Occiij & v and t>i are designators &: ((l) V (2) 
V (3)) -> € 5)), w/iere 

1. f = t>i, 

2. 3/(l</<Lna' & v - a' (I) & i>i =<(/)), 

3. v(l) = & = 3 -+ v(2) = Vl (2)) & 
Vi(l < 1 < Ln Index (u(l)> {(Arg i;)(t), (Arg Vl )(i)) G s). 

25.50 De/. substitute^, Ui, a', a'j) <-> w and wj are designators & a' and 
are sequences of terms & Ln a' = Ln a'-, & 

{w,«i) G Substitutions^, u x , a', a'J. 

25.51 r/im. (equality theorem for terms) b and 6] are terms & 
substitute(6, 61, a', a'j) — > D' 25 t )1 (b,bi, a', a^): Equals(a', a'J h 

Proof. Define 

s = Ran {(z, Proji z=Proj 2 z) : G Substitutions^, 6 1? a'j}, 
r = {(^OjLn^o) : ^0 G s }, 
A 1 — Enumer(s , r) , 
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c' = {{i, c) : i £ Dom A' & 3c x A'(i) - c=Ci}, 
c \ — {(h c i) : * ^ Dom A' & 3c A'(i) — c^ci). 

We distinguish three cases: 

1. c\i) = c\(i), 

2. c'(»)=ci(i) G Ran Equals (a', a'j), 

3. -(l)&-(2). ' 

Define 

C\ = ^546(^(0), 

<? 3 - £Wc'(0(l), Arg( C '(0),Arg( C ;(0)), 

C" = CJ, in case (fi), for 1 < // < 3, 
D'-{(t,C) :ieBomA'}\ 

25.52 r/im. a' and a[ are sequences of terms & Lna' = LnaJ & € 
Substitutions^, « lf a', a'j) —> (u and are terms V v and are formulas) 
& substitute^, v 1? a', a\). 

Proof. Suppose hyp (25.52), let 5 = Substitutions^, Uj, a', a'J, and let 
= {z G 5 : con (25.52) UiWl [Proj! z, Proj 2 z}}. 

Then we have 5cope M i n (25.49)^(5!], so s x — 5. Thus (25.52). 

25.53 Def. u~v — A (u and i> are terms h A = u=v) V (u and v are 
formulas h A — u£$v), otherwise A = 1. 

25.54 77im. {equality theorem for formulas) A and are formulas & 
substitute^, j4i, a', a'J — * Djs 54(^5 ^11 a 'i) : Equals (a', a^) h j4£Sj4i. 

Proof. Define 

s = Ran {(2, Proj! 2~Proj 2 z) : z G Substitutions^, j4i, a', a'J }, 

r = {(A q ,Lt\A ) : ^ G *o}, 

A' = Enumer(5 0) ^), 

t/' = {{1, v) : i G Dom ,4' & 3uj 

v[ ~ {{i, i^) : i G Dom ^4' & 3v v~vi}. 

We distinguish four cases: 

1. v'(i) and t/jfi) are terms, 
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2. Hi) &*'(.■) = «;(;)) 

3. v'{i) £ v[(i) & (v'{i 

4. v'{i) £ v[(i) & (v'{i 




Define 



CI = ^5.5i(^(0^i(t),a',ai), 

0\ = ^k3 2 K(0[3,Ln^(z)],t;;(0[3,Ln<(0i,y{0(2)}), 
C" = in case (/*), for 1 < p < 4, 
= C") :tGDomi4'}*. 



25.55 TTim. v occurs in u & v\ occurs in u\ — ► Substitutions^, a', a'j) 
C Substitutions(u, Ux, a', a'j). 

Proof. Suppose hyp (25.55), let s\ — Substitutions^, a', a'J, and let 
s = Substitutions^, u t , a', a',). Then scope Min (25.49) u Ul i8 \v, t) 1; sn sj], so it 
follows that si < s n si < Si- Thus (25.55). 

25.56 Thm. u is a designator & x' is an injective sequence of variables & 
a' and ctj are sequences of terms h Ln x' — Ln a' = Ln a\ & (u is a formula 
— > o' is simultaneously substitutable for x' m u & a\ is simultaneously 
substitutable for x' in u) — » substitute(u z / \a'] , u z i 

Proof. Suppose 3u3x'-> (25.56). By BLNP there exist minimal such u 
and x'. Let v = w^ja'], let = u x >\a\\, and let 

5 = Substitutions^, vi, a , a\). 

Clearly ^(u is a variable), so v(l) — t>i(l) = u(l). Suppose -i((u(l)) = 3 & 
(u(2)} G Ranx'). Suppose 1 < i < Index <u(l)), let w = ((ATgu){i)) x >\a'], 
and let — ((Arg u){i)) z > \a\] . By the minimality assumption we have 
substitute^, W\, a', a\). But w occurs in v and u)\ occurs in v l5 so by 
(25.55), (w,wi) G s. Thus G s, a contradiction, and thus (w(l)) = 

3 & {^(2)) G Ran x'. There exists j such that' 1 < j < Ln x' & 
x'(j') = (u(2)). Let y' = - 1] * x'[; + l,Lnx']; by (19.38) we have 

y' < x'. Suppose 1 < i < Index (u(l)}, let it; — ((Argu)(z)) y >[V], and let 
tfi — ((Arg u)(i)) y i \a\] . Again we have substitute^, u^, a', a'j), u; occurs 
in v and u>i occurs in vj, so (w,w-[} G s. Thus (w,t>i) G s, a contradiction, 
and thus (25.56). 
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25.57 Thm. (equality theorem) hyp (25.56) — ► 

D' 2h ^ 7 (u,x' ,a\a\): h Impl(Equals(a', a[) * (u x »[a , ]~u x ffa' 1 ])). 

(See Corollaries 1 and 2 of [Sh,§3.4]. The proof given there seems to 
require a slight emendation, as given below, because the variables occurring 
in one of the terms may overlap with the variables being substituted.) 
Proof. Define 

y' = Enum{y € Occ Conj Equals(a', a[) : y is a variable}, 
z' — Enum{z € Ran 2/ : z ^ Ranrr'}, 
e' = {(j'^o.u+a'+a'j+i) ■■ 3 e Domt/}, 

<*' = iihd) : j e Bomy' k Vi{y'{j) = x'{i) ~^d = x'(i)) & 
(y'(j)£Ranz'->d = e'(y))}, 

c' = {{l,a'(l) y ,\e']} :l eDoma'}, 
^-{(/^'iW.'^'D^GDoma'J, 
v — u z < \d']. 

We distinguish two cases: 1. u is a term, and 2. u is a formula. Define 

c[ = £>i 5 . 5 iK'M^.'W1 > c , ,ci), 

C" = CJ, in case (//), for 1 < /i < 2, 

#'1 = Cj 5 . 25 (EqualB(c', C ' 1 ) C',0), 

Aq — Conj Equals(a', a'i)— >u x < j a']~w x i |~aj] , 

yli = Imp] (Equalsfa'^ai) * (u x > \a f ]^u x i\ai j)), 

^ = ^5.28(^^,^0,^1). 
Unfortunately, there is a trivial distinction of cases to make: 3. a' = a\ — 0, 
and 4. -(3). Define 

D' 3 = (u~v), 

I> 4 = D , 2 *(A ^A 1 )*{A 1 ), 

D' = D'p in case (//), for 3 < \x < 4. 

Suppose /iyp (25.57). Clearly (3) — * con^'lh. 57) , so suppose (4). By (25.56), 
(25.51), and (25.54), C: Equals(c', c\) h u l( |c'] \c[] . Let 

C = ConjEquals(c',ci)^(u x 4c'l~ w i4 c il)- 
By the corollary (25.25) to the deduction theorem, D\\ Oh C. But 
^o y 'f e 'l ~ C» so the theorem on constants (25.28), D' 2 : h ^4 . Then 
by (25.22), D\: h y^, but D' = D\. Thus con (25.57), and thus (25.57). 
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25.58 Thm. [corollary to the equality theorem) a is substitutable for x in A 
& occurs in a) — > D' 255S {a,x,A): F A x |"a] ^3x{x^ahA). 

Proof. Define 

D' = p' 2b57 (A y {x),{x),{a))j {x=a^A&A x [a])) * (x=a&A^A x \d\) * 
{3x(x=a&zA)~A x \a\) * (a=a&iA x \a] ~3x(x=a&zA)} * D 25AQ (a) * (a=a) * 
{A x \a]&3x(x=a&A)). □ 

Finally, we discuss the prenex operations; see [Sh,§3.5]. 

25.59 Thm. x is a variable & B and C are formulas & -i(x is free in C) 
-* ((1) & ••- & (6)), w/iere 

1. D' 12b bQ (x, B): h ~3x£«Vx-5, 

2. L^ ^fx, J3): P -VxB^lx-.B, 

3 - ^3,25.59^^^) : f 3x£vC^3x(£vC), 

4 - ^,25.59^^^) : P Vx5VC^Vx(BVC), 

5 - Ds,25.w{x,B, C): h Cv3xB&3x(CvB), 

6 - ^6,25.59^^^) : P CVVx£^Vx(CV£). 

Proof. Define 

Z?; = {B^^B)*C' 2h _ S2 {B,^B,x)*(3xB^3x^B)*{^3xB^Vx^B), 
D' 2 = (~VxB&3x~B), 

D' s = (B~B\/C) * C' 2 ^ l4 (B,B\/C,x) * (3xB^3x[B\/C)) * 
(BvC~3x(5vC)) * (Cv3x(5vC)) * (B^3xB) * (5vC~3x5vC) * 
{3x(B\/C)^3xB\/C) * (axBvC^Bx^vC)), 

^ = (B^BVC) * Z?£ 5 14 (£, BvC,x) * (VxB~Vx(BvC)) * (C^BvC) * 
Z5 53 (C,BvC,x) * (C^Vx(5vC)) * i); 512 (5vC,x) * {Vx(£vC)--£vC> * 
{Vx(£vC)&-C~5)*D;, 5 . 3 (Vx(^^ 
<Vx(£vC)~Vx£vC) * <Vx£vC«Vx(.BvC)), 

L>5 = (CvB&BvC) * C 25 s^Cv^, 5vC,z) * (3x{C\/B)&3x{BvC)) * 
.D 3 * (3x£vC~3x(£vC)) * {Cv3xB^3x{C\/B)}, 

D' 6 = (CvB&BvC) * D' KS2 (C\/B,BvC,x) * (Vx(Cv£)~Vx(BvC)) * 
D\ * (Vx5vC«Vx(5vC)} * (CvVxB^Vx(CvB)). 

25.60 Def. A x is an immediate prenex transform of A 3x3*/3.B3C3Z)3 J D 1 
(x and y are variables &: A, Ai, B, C, L>, and I?! are formulas & x occurs 
in A & y occurs in Ai &; 5 occurs in A & C occurs in A & -«(t/ is 
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free in C) & y is substitutable for x in B h replacei (A, Ai, D y D\) & 
((1) V ••■ V (6))), where 

1. D = ~3xB & D x = V:c~J9, 

2. £> = -Vx£ & A = 3x-5, 

3. D = 3x£vC & A = 3j/(B z [y]vC), 

4. Z) = VxtfvC & D x = \/y(B t \y]vC), 

5. £> = CvSxB & £>! = Sj/fCvBjyl), 

6. D = CvVxB fc A = Vy(CvB x \y]). 

25.61 JTim. A! is an immediate prenex transform of A — > 

Proo/. Define x, t/, B, C, £>, and £>x as in (25.60). We distinguish the 



six cases 


(l)-(6) of (25.60). Define 




D' = 


D' 2B34 (A,A U {D),(D 1 )), 




D\ = 












c = 


D' 25A0 (D U D), 






C^D' 3 25 59 {y,B z \y],C)* 




#4 = 




D' , 








D' 6 = 


C *D> & ^(y,B x \y],C)* 




D' = 


D'^ in case (/x), for 1 < \i < 6. □ 



It is possible to express within our theory the notion of a formula being 
in prenex form. One can construct the prenex form of a formula via a 
bounded function symbol. Each of the transforms (l)-(6) pushes a logical 
connective to the right of a quantifier. It is necessary to define the notion 
of occurrence of a logical connective in such a way that the occurrences 
of negation in a universal quantifier are not counted, and to impose the 
restriction in (l) that (B{l)) ^ ^. Then we obtain the prenex form A\ of A 
by a sequence A' of formulas, each being an immediate prenex transform of 
its predecessor, with Ln A' < (Ln A) 2 -f 1. The formulas may grow slightly 
in length because a universal quantifier has length 4 while an existential 
quantifier has length 2, but we obtain the bounds 

Ln A' < Log(2-(A#A)), 



Ln Sup A' < Log(A • (2 ■ (A # a)) 2 ), 
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and 

Sup Sup A' < Max(Sup A, Sup Ai). 

Finally, one can construct a bounded function symbol that is a proof from 
of the equivalence of a formula with its prenex form. I do not think that it 
will be necessary for our purposes to carry out these constructions. 



Chapter 26 
Special constants 



There is another important derived rule of inference. When we have 
proved 3xA it is very useful to have a name for such an x. In our proofs we 
have been saying "there exists x such that A". More formally, for a closed 
instantiation 3xA one can adjoin a new constant r, called a special constant, 
and the special axiom 3xA — » A x [r], and this device can be iterated. When 
3xA is not closed, it is necessary to treat its free variables as constants; 
this is a tacit use of the Theorem on Constants. In this chapter we will 
construct a predicative arithmetization of the method of special constants, 
following the presentation contained within [Sh,§4.2]. 

26.1 Def. B is a special axiom 3x3A3r(x is a variable &: A is a formula 
&; t is a constant &z x occurs in A &; ->(r occurs in A) & 3xA is a 
closed formula & B — 3xA~A z \y] ). 

26.2 Def. Spvari? = x <-> 3 A3r scopes (26.1), otherwise x—1. 

26.3 Def. SpformJ? = A <-> 3x3r scope 3r (26.1), otherwise .4=1. 

26.4 Def. Spconst B — r <-> 3x3A scope 3r (26.1), otherwise r = 1. 

26.5 Thru. A and B are formulas & x and y are variables & -*(y occurs 
in Av B) - D' 26 ,{A,B,x,y): ((3xA^A t \y])^B) h B. 

Proof. Define 

]> = {(3xA~A x \y-\)~B) * (3y{3xA~A x \y]}~B) * ^ 5 35 (A,x,y) * 
{3xA~3yA x \y]) * D'^. 59 {y,A x \y],~3zA) * (3y(3xA^A x \y])} * (B). 
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26.6 Def. t[B'\ = (Lang t U Nls Axt U Ran B'). 

26.7 77im. < is a theory & i?' is a sequence of formulas — ► t[B'] is a theory. 
Proof. From (26.6) and (24.14). 

26.8 Thm. (theorem on special constants) t is a theory & B' is a sequence 
of special axioms & Vu(u is a nonlogical symbol & u occurs in B'* & 
w i Langf ->■ 3i(l < i < LnJ3' & u = Spconst JB'(i))) & Vi'(l < t < Ln£' 
-> Spconst B'(z') ^ Lang £UOcc£'[z'+l, LnB']*) & A is a formula of Lang t 
& D' is a proof in i[B'] of — ► Z^g 8 (£, 5', A, D' ) is a proof in t of A 

Proof. Define 

r' = {{i, Spconst £'(*')) : i G Dom 

C' = {{i,Spform£'(i)> : i & Dom B'}, 

A' - {{t, Impl(£'[t\ Ln B'\ * (A))) : i G Dom B' U {Ln £' + 1}}, 

= ^25 2 5 (£'> % Enum Ax 0' 
y' = {(i,X B , +A+% ) : i G Dom B'}, 

C[ - {(t,Ssub(C;(z),r',y')) : i G Dom B'}, 

A\ ={{t,SsubK(i),r , ,y')> rzGDom^}, 

^2 = ^25.28(^^^1(1),^), 

#3 = I?' 26 .5(CJW^i(« + l),SpvarB'(0,y'(0), 
D' = D' 2 * {{i,D' z } : z G Dom 5'}*. 

Suppose /ij/p(26.8). Observe that 

1. VVVj(l < z < j < LnB' -> -(r'(z') occurs in B' {]'))). 

Now B' is a sequence of closed formulas, so by the corollary (25.25) to 
the deduction theorem, D[ is a proof in t of Impl(B' * {A)). Observe that 
Impl(B' * (.4)) - A' (l). By the theorem on constants (25.28), D' 2 is a 
proof in t of A'^l). By (26.5), which is applicable by (1), 1 < % < LnB' 
D' s : A\(i) h A\(i + 1), so D' is a proof in t of A[(LnB' ' + l). But 
A; (LnB' + 1) = A, and thus (26.8). 



Chapter 27 

Extensions by definition 



In this chapter we will predicatively arithmetize the notions of extension 
by definition of a predicate symbol and extension by definition of a function 
symbol, and show how to construct bounded function symbols that trans- 
late proofs into the original theory. We will follow [Sh,§4.6] except for the 
proof that an extension by definition of a function symbol is conservative. 
We begin with some general properties of translation functions. 

27.1 Def. g is a translation function on s «-» g is a function k. s is a 
set of formulas & Dom</ = s & \/B(B E s —* g(B) is a formula & 
Free g(B) = Free B) & (l) k (2) & (3), where 

1. VB(^ G6 -» ff pB) = " ? (5)) J 

2. VBVCfBvC € s -> g^BwC) = g(B)vg(C)), 

3. VBVx(3xB € « -> <7(3x£) = 3xg(B)). 

27.2 De/. Atoms A = {B € Formulas A : B is an atomic formula}. 

27.3 Thm. g 1 and <7 2 are translation functions on Formulas >i & 

<7l| Atoms yl = 02 | Atoms .A ~+ Q\ ~ 92 ■ 

Proof. Suppose hyp (27. 3), and suppose 3B(gi(B) ^ 92(B)). By BLNP 
there is a minimal such B. Clearly B 6 Formulas^. By (23.30), B is an 
atomic formula, which is impossible. Thus gi = g 2l and thus (27.3). 

27.4 Thm. g is a translation function on Atoms A — > 3g(g is a translation 
function on Formulas A & g C g & Ln Sup g < Ln A • Sup (Ln o g ) < 
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Log(A #0 O (Maxm(Ln o g ))) & SupSup^ < Max(Sup A, SupSup^ ))- 
Proof. We use the abbreviation a for 

g is a translation function on s & s C Formulas A & </ ^ & 
Vi?(i? € s -> Formulas £ C 5). 

Suppose /ij/p(27.4). We claim that 

1. a & B £ s -> Lng(B) < Ln£-Sup(Ln o g ) & Supg(B) < 
Max(Sup B, Sup Sup g Q ) . 

Suppose 3B->(1). By BLNP there exists a minimal such B, but this is 
impossible by (23.30). Thus (1). Since 

LnB ■ Sup (Ln o g ) < Log(A #£ (Maxm(Ln o g ))), 

we have 

3g a: Domg < FormulasA, LnSup# < Log(A # O (Maxm(Ln o g )))> 
Sup Sup g < MaxfSup A, Sup Sup #o)- 

We have a Stg \ Atoms A, go] and hence 3g a a [Atoms A]. Let 

5 = Max s(s < Formulas A Sz 3g a). 

Then 3g a by MAX, so of course there exists g such that a. Suppose 

2. 3B(B e Formulas ,4 & B $ s). 

By BLNP there exists a minimal such B. Let si = s U {£?}. Now £ ^ 
Atoms A, so by (23.30) there exist C, 7?, and z such that 

C<Es&D£s&{B=~CvB = CvB v B = 3xC). 

Suppose B = and let gi — g U {{^C, ~0(C))}. Then a ap [si0i], so 
3g ctjl^x]. By the maximality of 6 we have $1 < s, a contradiction. Thus 
£ ^C. Suppose B = CvD and let g h = ? U {{C\/D,g(C)Vg(D))}. Then 
5j < 6, a contradiction, and thus B — 3:eC Let <7i = # U {{3xC, 3i^(C))}. 
Then ^ < s, a contradiction, and thus _i (2). Therefore 5 = FormulasA, 
and thus (27.4). 

27.5 Def. Trext(<?o, A) = 9 Qo is a translation function on Atoms A & 
^ is a translation function on Formulas A & g C gr, otherwise 0=1. 

We have been using the abbreviation go/. Now we introduce a binary 
function symbol denoted by o. 
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27.6 Def. g o / = {{x,z) : x G Dom/ & /(i)eDomff & = g[f(x))}. 

27.7 TVrni. g is a translation function on s & B' is a sequence of formulas 
& IraplB' G s -* g(lmp\B') = Impl(y o £'). 

Proo/. Suppose 3J3'->(27.7). By BLNP there exists a minimal such B'. 
Clearly Ln£' > 2. Let = £'[2,Ln£']. Then ImplB' = £'(l)~Impl B[, 
so con (27.7), a contradiction, and thus (27.7). 

27.8 77im. g is a translation function ons & Impl(f?' * (J5)) G s & i? is 
a tautological consequence of £?' — * d(B) is a tautological consequence of 
g o B'. 

(See the Remark in |Sh,§3.lj.) Proof. Suppose hyp (27. 8) and let A = 
Impl(£' * {£)). By (27.7), g(A) = lmp\{g o 5' * (flr(£)>). Suppose v is a 
truth valuation on ff(A), and let 

v = {(C,u(ff(C))) : C G Formulas ,4}. 

Then t>o is a truth valuation on A, so t>o(A) = 1 and hence u(A) — 1. Thus 
g(A) is a tautology, and thus (27.8). 

27.9 Thm. g is a translation function on s & C E s & D e s & C can 
be inferred from D by 3-introduction — * g(C) can be inferred from g(D) 
by B-introduction. 

Proof. Suppose hyp (27.9). There exist x, A, and B such that ^(x is free 
in B) & D = A~B & C = 3xA~B. Since Free ^(5) = Free£?, we have 
-(x is free in p(£)). Also, <?(£>) = (,(A)~<7(£) and </(C) = 3x<?(A)~<7(£), 
so con (27.9). Thus (27.9). 

27.10 Thm. A is a formula & g is a translation function on Formulas A 
— » replace(A, #(A), Enum Atoms A, (/ o Enum Atoms A). 

Proof. Suppose /iyp (27.10), and let B' — Enum Atoms A. Suppose 1: 
3B{B G Formulas A & (B,g(B)) £ Replacements ( A, g ( 4) go B')). By 
BLNP there exists a minimal such B y which is impossible. Thus (1), so 
that con (27.10). Thus (27.10). □ 

Now we introduce the notion of an extension by definition of a predicate 
symbol. 

27.11 Def. extp(ti,t,p, x', D) +-> ti and t are theories &; p is a predicate 
symbol & p ^ Lang i & p ^ = & x' is an injective sequence of variables 
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& Index p = Ln x' &; D is a formula of Lang t &: Ran Free D C Ran x' 
k <! = f[(/>*x'*«I>)]. 

27.12 Def. TT<Ltp{p,x',D,u,A) = C <-» ((A(l)) ^ p -+ C = A) & 
«A(1)) = p - C = B 25 .44(A^ * u) x 4ArgAl). 

This is the arithmetization of A*, for A an atomic formula, in the dis- 
cussion of predicate symbols in [Sh,§4.6]. Recall that B 2 ia4(D,A * u) is 
a variant of jD, constructed to avoid colliding variables with A * u. It is 
convenient to allow the dependence on an auxiliary expression w; this will 
save a lot of fuss with variants. 

27.13 Def. A is an atomic formula of / A is an atomic formula & A is 
a formula of /. 

27.14 Thru. extp(ix, 1, p, x\ D) & A is an atomic formula of Lang ti — * 
D 27 u (p, x\ D, A, u) is a proof in ti of A^Tratpfp, x\ D, u, A). 

(See (i) in the discussion of predicate symbols in [Sh,§4.6j. The restric- 
tion to atomic formulas will be removed shortly.) Proof. We distinguish 
two cases: 1. (A(l)} ^ p and 2. {A(l)} = p. Define 

D[ = <A«A), 

Do - B 2hAA {D,A*u), 

D' 2 = (p*3?*&D) * D' 2 , 43 {D ,D) * (p*z'*»Z> > * 
D 2h6 {ATgA,x',p*x'*&D ) * (p*{ATgA)*&D 0x ,\Arg A]), 
D' = D'y in case (/*), for 1 < p < 2. 

Suppose /iyp (27.14). Clearly (1) — * con (27.14), so suppose (2). Then 
p*(ArgA)* = A and D 0z >\AigA} = Tratpfp, x', D, u, A), so by the variant 
theorem (25.43) and the substitution rule (25.5) we have con (27.14). Thus 
con (27.14), and thus (27.14). 

27.15 Def. Trfnp[p,z',D,u,A) = 
Trext({(5,Tratp(p,x',Z?,u,5)> : B € Atoms A}, A). 

27.16 Def. Trp(p,x',D,u,A) = Trfnp(p, x', £>,u, A)(A). 

27.17 JTim. extp(<!,t,p, x\D) & A is a formula of Lang t\ — ► 

Trp(p, x', D, u, A) is a formula of Lang t &; (A is a formula of Lang t — * 
Trp(p,x',D,u,A) = A). 

Proo/. Suppose 3A-^(27.17). By BLNP there exists a minimal such A, 
which is impossible. Thus (27.17). 
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27.18 Thm. hyp (27.17) -» D' 271g {p, x\ D, u, X) is a proof in t x of 
A&TTp{p,x',D,u,A). 

Proof. Define 

B[ — Enum Atoms A, 

D[ = {(i,D' 27u (p,x',D,B'{i),u)} : i G DomB'}* * 
D' 2534 (A, Trp(p, x\ D, u, BJ). 

Then (27.18) by (27.14) and the equivalence theorem (25.34), which is 
applicable by (27.10). 

27.19 Thm. g = Trfnp(p, x\ Z>, w, A) & x is a variable & a is a term & 
£ € Formulas ,4 & Bja] G Formulas A -»> g{B x \a]) = (ff(£)Jal). 

Proof. Suppose 3£?^(27.19). By BLNP there exists a minimal such B. 
Clearly -(£ is an atomic formula), <J3(l)> # and (B(l)> / V. ^Therefore 
(5(1)) = 3. Let y = (B(2)) and let C = £[3, Ln B], so that J5 = 3yC. Sup- 
pose y - x. Then <?(!?.,. faj) = </(i?) = (^jB) z fa]), a contradiction, and thus 
y ? x. Then g(B x \a]) = g(3yC s \a]) = 3^(Cja[) = Sy^C)), [aj by the 
minimality assumption, and 3y(g{C)) x \a] = (g(3yC)) x \a] = (g(B)) x \a\. 
This is a contradiction, and thus (27.19). 

27.20 Thm. extp(t u t, p, x\ D) k D' Q is a proof in ^ of A -* 
D' 27 20 (p,x\D,D' ) is a proof in t of Trp(j>, x\ D, D' * , .4). 

(See (ii) in the discussion of predicate symbols in [Sh,§4.6].) Proof. 
Suppose hyp (27.20) and define 

^ = Trfnp(p J xM?, J Di*,DisjZ>y, 
£>o = B 2bA4 {D,D' *). 

Observe that 

ViV£(l < i < LnD' Q & Be Formulas/^ 
g(B) = Trp(p,x', J D,^*,£)) 

by (27.3). Suppose 1 < i < LnD' . We distinguish three cases: 

1. D' (i) is a substitution axiom V D' (i) is an identity axiom V (X?q(i) 
is an equality axiom & ->(p occurs in D' Q (i})) V D' (i) & Axt V D' (i) is 
a tautological consequence of D' [l,i - l] V 3/(1 < j < i & £*o(0 can be 
inferred from I?o(j) by 3-introduction), 

2. ->(1) & D' Q (i) is an equality axiom, 
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3. -(1) & D' (i) =p*x'*&D. 

Suppose (1) and define C\ = (g{D' Q (i))). We claim that 

4. C[: EnumAx* *g o D' \l,i - 1] h 

This holds by (27.19) (for a substitution axiom), by (27.17) (for axioms 
of Langf), by (27.8) (for tautological consequence), and by (27.9) (for 3- 
introduction). Thus (l) — + (4). 

Suppose (2), define y' and z' as in 

3y'3z'D' (i) = Impl(Equals(2/\z') * (p*i/*^«'*)), 

and define C 2 = D' 2 m(D ,x\y\z'). Thus (2) -> (4) C »[CJ] by the corollary 
(25.57) to the equality theorem. 

Suppose (3) and define C' 3 = D' 25A3 (Do, D) * (D ^D). Observe that 
D £±D = g{D' (i)}, and thus (3) — ► (4)c» [CJ] by the variant theorem 
(25.43). 

Define C = in case (/i), for 1 < fi < 3. Thus 1 < i < LnD' -> 
(4) c; [C). Define D' = {{i,C) : i € DomD' Q }*. Then D' is a proof in / of 
g(A), and thus (27.20). □ 

In arithmetizing the notion of an extension by definition of a function 
symbol, we need to include the proofs of the existence and uniqueness 
conditions in order to have a bounded predicate symbol. So as not to have 
to worry again about variants, we first treat the case that the right hand 
side of the defining axiom is an atomic formula; the general case is easily 
reduced to this by first adjoining a new predicate symbol. 

27.21 Def. extfo(t},t, f,z' ,y,yi,p,C' ,C[) t 2 and t are theories & / 
is a function symbol &i f ^ Langi &; x' * (y) * (yi) is an injective 
sequence of variables & Index / — Lnrr' &; p is a predicate symbol & 
Index p — Index / + 1 & C' Q is a proof in t of 3yp*x'**y & C[ is a proof 
in t of p*x'* *yfop*x'* *yi c 5y=yi & i] = t[y=f*x , *£*p*x'**y}. 

Now we introduce some function symbols to be used in eliminating 
occurrences of /. 

27.22 Def. Newvaru = Mm z{z < X u & z is a variable h ->(z occurs 
in u)), 

27.23 Def. Lasti(/,u) = i <-* (u(i)) = / & V/(t <j<Lnu-» (u(i)) ^ /), 
otherwise i — 0. 
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27.24 Def. Last 2 (/, u) — j ^ u and u[Lasti(/, u),j] are designators, other- 
wise j = 0. 

27.25 Def. Arglast(/,u) = Arg(u[Last!(/, u), Last 2 (/, u)}). 

27.26 Def. Elim(/,u) = u\l, Lasti(/,u) - l] * Newvaru * 
u[Last 2 (/, u) + l,Lnu]. 

27.27 Def. Deg(/,tt) = Card{t G Domu : (u(t)> = /}. 

27.28 Thm. f is a function symbol & u is a designator &: f occurs in u 
& z = Newvaru & a' — Arglast(/, u) & v = Elim(/, it) — » u = r z f/*fl'*] 
&r ->(/ occurs in a'*) & Deg(/, = Deg(/, u) — 1. 

Proo/. From (27.22)-(27.27). 

27.29 Thm. f is a function symbol & u is a designator — ► 3\v'(hnv' = 
Deg(/» + l & v'(l) = « & V*(l < t < Lnv' -» v'(i + l) = Elim(), v'(z'))) 
& Vi(l < i < Lnv' -* Deg(/,u'(t)) = Deg(/, u) + i-l) & LnSupt/' <Lnu 
& Sup Sup t/ < X u+hnu ). 

Proof. The uniqueness holds by (12.17). We use a as an abbreviation 
for scope^v' (27.29) but with Lnv' = Deg(/, u) + 1 replaced by Lnv' < 
Deg(/, u)-fl. Suppose hyp (27.29) and let v' — Max v ' a. We have a v >\{u}], 
so by MAX we have a. Suppose / occurs in t?'(Lnt/), and let 

v' = v u{(Ln</ + l,Elim(/,i/(LnV)))}. 

Then ovjvj,] by (27.28), so that i?q < i>', which is an impossibility. Thus --(/ 
occurs in v'(Lnv')); that is, Deg(/, v'(Ln v')) = 0. Consequently, Lnv' = 
Deg(/,«) + 1, and thus (27.29). 

27.30 Def. Elimseq(/, tt) = v 1 <-+ hyp (27. 29) & scopes (27.29), otherwise 
v' = 1. 

27.31 TTim. / is a function symbol & A is an atomic formula — » 3!gf(gr is 
a function & Domt/ = Ran Elimseq(/, A) & VB(B £ Domg — ► (l) & 

• • ■ & (4))), where 

1. Ln^(5) < Ln£ + (8 + Index/) -Deg(/,5) & 
Ln ff (6) <Log(5 9 .(5#5)), 

2. Sup^B) < 

3. Deg(f,B) = 0-*g{B) = B t 
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4. V 2 VCVa'(Deg(/,J3) ^ & z = Newvartf & C = Elim(/,£) & 
a' = Arglast(/,£) -> <?(£) = 3z{p*a'**z&g[C))). 

Proof. Suppose hyp (27.31). Let A = Reverse Elimseq(/, A). Write a as 
an abbreviation for scope^ g (27.31) but with Dom<? = Ran Elimseq(/, A) 
replaced by 3/(1 < j < LnA' & Domg = Ran j4'[1,j]), and let g = 
Max g a. We have 

a: Domg < Ran Elimseq(/, A), Ln Sup# < Log(A 9 • (A # A)), 
Sup Sup g < X A+hnA + p+ 3 

and we have c* s [0], so a holds by MAX. 
Suppose 

3i'(l < i < LnA' &l A'(i) Domp). 

By BLNP there exists a minimal such i. Suppose i = 1. Then Deg(/, A'(l)) 
= 0. Let g y = g U {(A'(l), A'(l)}}. Then so g^ < g, a contradiction, 

and thus i # 1. Let z = Newvar A'(i), let a' = Arglast(/, A'(i)), and let 

ff, = U {U'(0,^(p*a'**^(A'(2 - 1))))}. 

By (23.60) and (23.59), Ln^i(A'(t)) < Lng{A'{i - l)) 4- (8 4- Index/). Let 

/c = LnA'(i) -t (8 t- Index/) ■ Deg(/, A'(z)) , 

so that Ln gi(A'(i)) < k. Since / occurs in A'(i) we have Index / < LnA'(z'), 
and Deg(/,A'(0) < LnA'(i), so that < Log(A'(i) £ ' ■ (A' (i) # A' {i})) . 
Therefore a tf [<7i], so g^ < g, a contradiction, and thus Dom<? = Ran A' = 
Ran Elimseq(/, A). Hence scopej\ g (27.31). 
Suppose scope^ (27.3l) 5 [^i], and suppose 

3t'(l < i < LnA' & g{A'{i)) ^ gi (A'{i))). 

By BLNP there exists a minimal such t. Suppose i — 1. Then g(A'(i)) — 
<7i(j4'(i)), a contradiction, and thus i ^ 1. Then again ff(A'(t)) = gi{A'(i)), 
a contradiction, and thus g = g x . Thus con (27.31), and thus (27.31). □ 

In an effort to make the rest of this chapter less unreadable, let us make 
the following conventions. Any theorem marked * is understood to have 
the hypothesis 

extf (<i, t, f, x\ y, yi,p, C' , C[), 
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called the tacit hypothesis, and any nonlogical symbol introduced by a defin- 
ing axiom marked *, or introduced (by "define . . .") in the proof of a the- 
orem marked *, is understood to have as its first arguments £ 1? t, /, x', j/, 
3/1, p, Cq, C\. In proving theorems marked *, we will not introduce and 
discharge the tacit hypothesis, and if (£) is such a theorem, by hyp(£) we 
mean the hypothesis of the theorem as written (not the tacit hypothesis). 

27.32* Def. Tratf A = g hyp (27.31) & scope 3 s g (27.31), otherwise g = 1. 

27.33* Z)e/. Trat ,4 = Tratf A (A). 

This is the arithmetization of A*, for A an atomic formula, in the dis- 
cussion of function symbols in [Sh,§4.6]. See (i) of that discussion for the 
following result. The restriction to atomic formulas will be removed shortly. 

27.34* Thru. A is an atomic formula of Langt 2 — * D' 21 M (A) is a proof in 
U of A&Tr'dtA. 

Proof. Suppose hyp (27.34) and define B' = Elimseq(/, ,4), g = Tratf A. 
Suppose 1 < i < hr\B' and define z = Newvar B'(i), a' — Arglast(/,B'(i)), 

C 2 = (B'(i + l)*g{B'{i + 1))) * (y=f*x?*&p*z'**y). 

We want to construct a proof from C' 2 of B'(i)^g(B'{i)). Recall that 
g{B'(i)) = 3z(p*a'**z£ig(B'{i+l))). Define 

C's = C 2 * D> 2 ^(a' * (z),x' * (y),y=f*x'*~p*x'**y). 

By the substitution rule (25.6), CL: C 2 ~ z=f*a'* ^p*a'* *z. Define 

= CJ*Z?i 5 s 4 (33(2=/* a '*&B'(t + l)), ff (5'(0), <*=/*a'*)*<£'(t + l)>, 
<p* G '**z) * ( P (£f'(* + 1))». 

By the equivalence theorem (25.34), 

CJ: CJ h 3z(z=/*a'*&£'(t + l)«p(£'(t))). 

Define 

^ = C\ * X?i 5 . B8 (/*a'*, 2, B'(z + 1)) * (B'(i + 1) z \f*a'*]&g(B'(i + 1))). 

By the corollary to the equality theorem (25.58), CJ: C 2 h CjfLnCj), but 
B'(t + l)J/*a'*l = Thus 1 < i<Ln5'-> CJ: C' 2 h B'(:)» ff (£'(t)). 

Define 

£>' = Reverse{ ( t, CJ) : i € DomB'[l,Ln5' - 1]}. 
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Then D': (y=/*x'*«p*x'**y) P A&g(A), and thus (27.34). 
27.35* Def. Trfn A — Trext({<£, Trat B) : B G Atoms A), A). 
27.36* De/. Tr.4 - Trfn A(A). 

27.37* 77tm. ^4 is a formula of Langii — * Tr A is a formula of Langi & 
(.4 is a formula of Langf — ► Tr ,4 = j4). 

Proo/. Suppose 3,4^(27.37). By BLNP there exists a minimal such A. 
Then A is an atomic formula, so that Tr A — Trat A. But by (27.31) this 
is impossible. Thus (27.37). 

27.38* Thm. A is a formula of Langi] — » D' 21ZB (A) * s a P ro °f m *i °f 
.A^Tr A. 

Proof. Define 

B' = Enum Atoms A, 

B\ = {(t',TratS'(0) :i€ Domtf'}, 

D' = {( h D' 27 34 (B'(t))) : i € DomE'}* * ^ 5 34 (A, Tr A 5', B\). 

Then (27.38) by (27.34) and the equivalence theorem (25.34), which is 
applicable by (27.10). □ 

The next task is to give a predicative arithmetization of the theorem 
that an extension by definition of a function symbol is conservative. It is a 
semantic triviality that such an extension does not alter the validity of any 
formula, but the argument by Godel's Completeness Theorem that it is a 
conservative ext ension yields no clue as to how much longer is a proof with 
the new function symbol eliminated. We cannot follow the proof of (ii) in 
the discussion of function symbols in [Sh,§4.6] because it is based on the 
Theorem on Functional Extensions (in which the uniqueness condition is 
not assumed), whose proof in [Sh,§4.5] uses Herbrand's Theorem, which in 
turn depends on the Consistency Theorem; this argument yields a super- 
exponential bound. (I do not know whether the Theorem on Functional 
Extensions can be established predicatively; we have not used such exten- 
sions in the development of our theory.) The difficulty in a direct proof, 
similar to the one for an extension by definition of a predicate symbol, is 
that the translation of a substitution axiom is not in general a substitution 
axiom — the analogue of (27.19) fails because the term a may contain the 
new function symbol f. There is a direct proof in [Kl,§74], but it is very 
intricate. Here is a different proof; so far as I know, it is new. 
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The idea can be described very quickly. Consider an extension Tj of T 
by definition of a function symbol f. For any variable-free term a of Tj we 
define a variable-free term a c of T c (this is the theory obtained by adjoining 
all special constants and special axioms of T; see [Sh,§4.2]) by replacing 
each part of a of the form faj . . . a„ by the corresponding special constant, 
working from right to left. By the existence and uniqueness conditions and 
the special axioms, A x [a]* and A*[a c ] are equivalent in T c . Therefore if 
C is a closed substitution axiom of Ti, then C* is equivalent in T c to a 
substitution axiom, and since T c is a conservative extension of T, C* is a 
theorem of T. If C is an arbitrary substitution axiom of Ti, then K T C* by 
the Theorem on Constants. 

Now let us examine the argument in full detail. Let T be a theory, let 
p be a [y -j- l)-ary predicate symbol such that 

h T 3ypxi ...x y y 

(existence condition) and 

h T pxj . . . x v y & pzi . . . x v yi y = yi 

(uniqueness condition), and let Ti be the theory obtained by adjoining to T 
a new f-ary function symbol f and the denning axiom 

y = f Xi . . . x v *-* pxj . ..x v y. 

Let A be an atomic formula of T lc ; we define A* by induction on the 
number of occurrences of f in A. If there are none, then A* is A. Otherwise, 
let B be the atomic formula with one less occurrence of f obtained by 
replacing the rightmost occurrence in A of a term beginning with f by z, 
where z is the first variable in alphabetical order not occurring in A, so 
that A is B z [fa] ...&„} where a l5 . . . , a^, do not contain f. Then A* is 

3z(pa x . . . a„z & B*). 

For a non-atomic formula A of T lc , we define A* by replacing each atomic 
part C of A by C*. This is the construction of [Sh,§4.6], which has been 
arithmetized in (27.31). 

Let us show that if a is a term of T jc with no occurrences of f, then 



i. A x [a]* is A* [a]. 
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It suffices to prove (i) for A atomic. Then the proof is by induction on 
the number of occurrences of f in A. If there are none, then both formulas 
are A x [a]. Otherwise, using the notation introduced above, we see that the 
following are all the same formula: 

A x [a] , 

B z [fa! . . .a„] x [a]*, 
B x [a] z |fa lx [a] . . . a„ x [a]]*, 
3z(pa lx )a] . . .a„ x [a]z & B x [a]*), 
3z(pa lx [a] . . . a^jajz & B* [a]), 
A* [a]. 

The induction hypothesis was used in the next to last step. 

Let a be a variable-free term of Ti c . We define a variable-free term a c of 
T c by induction on the number of occurrences of f in a. If there are none, 
then a c is a. Otherwise, let b be the term with one less occurrence of f 
obtained by replacing the rightmost occurrence in a of a term beginning 
with f by y, so that a is b v ffaj . . . a^i where ai . . . a v do not contain f. Let r 
be the special constant for 3t/pa] . . . a^y; then a c is b„[r] c . 

Now let us show that if a is a variable-free term of Ti c , then 

ii. h Tc A x [a]*<-> A*[a c j. 

By the Equivalence Theorem, it suffices to prove (ii) for A atomic. We 
can assume that there is precisely one free occurrence of x in A— if there 
are none, we have (ii) by a tautology, and otherwise we can write A x [a] 
in the form AJ^ x Ja. . . a] and obtain (ii) by induction on A from the case 
A = 1. Now the proof is by induction on the number of occurrences of f in 
A x [a]. If there are none, then we have (ii) by a tautology. Otherwise, use the 
notation introduced above. If the rightmost occurrence of a term beginning 
with f is not in the occurrence of a that has been substituted for x, then 
A x [a] is B x [a] B [fa! . . . a„], so that A x [a]* is 3z(pa! . . . a^z & B x [a]*), which 
by the induction hypothesis is equivalent in T c to 3z(pai . . . a v z <fc B*[a c ]); 
i.e., to A*[a c ]. Otherwise A x [a] is A x [b„[fai . . .a„]], so 
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A x [a]* is 3z(p* 1 ...* v z & A x [b']*) 
where b' is b„|z]. Now 

h Tc 3ypa! ...a,„y 
by the existence condition and the Substitution Rule, so 

iii. h Tc paj . . . a„r 
by the special axiom for r. Also, 

h Tc pai . . . a^r & pai . . . a^z -> r = z 
by the uniqueness condition and the Substitution Rule, so 

h Tc pa! . . . a^z — > r — z 
and a fortiori 

h Tc pa] . . . a^z & A x jb'f — ► r = z. 

But 

h Xc r-z --»(A x [b'] B *[r]^A x [b']*) 
by the Equality Theorem, so 

h Tc pa^.-a.z & A x ibf -> A x [b'] B *[r] 
by a tautology. By 3-introduction, 

iv. h Tc 3z(pa!...a^z & A x |b']*[r]) -> A x [b'] E *[r]. 
Conversely, since 

h Tc pai . . . a„r & A x [b']* [rj -> Bzfp^ . . . a„z & A x [b']*) 
by a Substitution Axiom, we have by (iii) that 

v. h Tc A x [b' 1 B *[r]->3z(pa 1 ...a,,z& A x [b']*). 
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By (iv) and (v), A x [a]* is equivalent in T c to A x [b']*[r], which by (i) is 
A x [b^[r]]*, i.e. A x [b y [r]]*. By the induction hypothesis, this is equivalent in 
T c to A*[b v [r] c ]; i.e., to A*[a c ]. This proves (ii). 

Now we are ready to prove that if h Tl A then h T A*. The proof is 
by induction on theorems (see [Sh,§3.1]). Tautological consequence and 
3-introduction present no problem, by the way in which we defined A* for 
A non-atomic (to borrow from our arithmetical terminology, the mapping 
A i— » A* is a translation function), so we need only show that if A is an 
axiom of Ti then A* is a theorem of T. Let To be the theory obtained 
by adjoining new constants e!,e 2 ,e 3 ,. . . (distinct from f), but no new non- 
logical axioms, to T. Let A be A Wj W/i [e! . ..ej where w lv ..,w^ are in 
alphabetical order the free variables of A. Notice that A * is A* , by (i), 
so by the Theorem on Constants it suffices to show that h T(1 A * for A an 
axiom of T] . 

Let A be an axiom of T. Then A * is an instance of A. 

Let A be a substitution axiom of Ti. Then A is a closed substitution 
axiom B x [a; — > 3xB, and by (ii), B x [a|* is equivalent in T 0c to B*[a c ], so 
that A * is equivalent in T 0c to the substitution axiom B*[a c j — > 3xB*. But 
A * is a formula of T and T 0c is a conservative extension of T , so A * is 
a. theorem of T . 

Let A be an equality axiom for f. Then A is 

a-i = bi — * ■ • • — ► a^ = b^ — > fax . . . a„ = fb x . . . b„ 

where & u . . . , b„ are e 1; . . . ,e 2l , in some order. Let r be the special constant 
for Jypaj . . . cL^y and let s be the special constant for 3t/pbj . . . b^y. By (ii), 
A°* is equivalent in To c to 

a-i — bi — > • ■ ■ a^, = h u — > r — s. 

But 

^t„c a 2 = b! -~ > ■ • ■ -+ a y = b v — > (pa 2 . . . a„s <-> pb] . . . b„s) 
by the Equality Theorem, and 
h T()C pb 2 . . . b^s 

by the special axiom for s and the existence condition, so A * is a theorem 
of T 0c and hence of T . 

Finally, let A be the defining axiom of f. Then A is 
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b = faj . . . +-» paj . . . a^b 

where b, a! , . . . , a„ are e! , . . . , e^ in some order. Again let r be the special 
constant for 3yp&i . . .a^t/. By (ii), A * is equivalent in To c to 

b = r paj . . . a„b, 

so that A * is a theorem of T 0c , and hence of T , by the existence and 
uniqueness conditions and the special axiom for r. 

Since A* is A if A is a formula of T, this shows that Ti is a conservative 
extension of T. 

Now it is a straightforward task to give a predicative arithmetization of 
this argument. 

27.39* Thm. D' is a proof in ti of A — > D' 27 39 (D' ) is a proof in t of Tr A. 

The proof and the construction of .#2739 are omitted. More precisely, I 
have omitted to write them down. In a previous version of this chapter I 
carried out a detailed arithmetization. But as Sam Buss pointed out, there 
was a conceptual error in the original metamathematical argument, and 
this was simply copied in the arithmetization. The moral is the familiar 
one that one's capacity for self-deception is great. Perhaps this can be 
avoided by submitting oneself to the discipline of a. completely formalized 
proof, but this is an ideal that is seldom achieved in mathematics, and 
certainly not in the present work. 

Now we remove the restriction that the right hand side of the defining 
axiom be an atomic formula. 

27.40 Def. ex\,{(i l ,tJ,x\y,y l ,D,C'^C[) <- h and t are theories & / 
is a function symbol &; / ^ Lang/ & x' * {y} * (x/i) is an injective 
sequence of variables &; Index/ = Ln x' & D is a formula of Langf 
& Ran Free D C Ran(z' * {y}) & C' Q is a proof in t of 3yD & y x is 
substitutable for y in D &: C[ is a proof in t of D&cD y \yi]~y^y : & 
t 1 = t\y=f*x'*&D}. 

27.41 Def. TT^tJ^x'^yuD^C'^A) = 
Trp(P Ln x'+i.i, x' * {«/),£>, u, Tr (t u t, /, x\ y, y u Puiz'+u, CJ, C[,A)). 

27.42 Thm. extf(*i,f, / ,x' ,y,y u D ,C' ,C[) & D' is a proof in t of A 
D 27A2( t i^ i ->f^ x '^y^yuD,C , Q ,C[,D , Q ) is a proof in t of 
TT 1 {t u tJ,x\y,y u D,C^C[,u 27A2 (t 1 JJ,x\y,y l ,D,C' ,C[,D' ),A). 

Proof. Suppose hyp (27.42) and define 
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V - PLnz' + l,t > 

<2 = *[<P*a:'**y»£)], 
*3 = t 2 \(y=f*x'*&p*x'**y)}, 
CJ = Ci * Ci 6S2 (p*x'**y,Ay) * (3yp*x'**y>, 
Q = p; * ^5. 6 ((yi>, (y),/>*z'**y~L>) * (p*x l **y 1 ^D v \y 1 ]} * 
(p*x'**y&p*x'**yi^y=yi). 

Then exti (t 3 ,t 2 , f, x', y, y 1} p } CJ, CJ). Define 
Then con (27.42), and thus (27.42). 



Chapter 28 
Interpretations 



The proof in [Sh,§4.7] of the Interpretation Theorem has a straightfor- 
ward predicative arithmetization. We begin with the notion of an interpre- 
tation i, with universe i*o, of one language in another. 

28.1 Def. interpof^, u , /i, ^2) ^ ^1 an d I2 are languages &: u is a predicate 
symbol & Index u — 1 & u £ h & Domi = l x &: Rani C / 2 &; 
Vu(t> 6 /1 ~> Index 2(1;) Index?; & (i[v) is a predicate symbol <-> t> is a 
predicate symbol)). 

28.2 Z>e/. ti(j) = {(j,v) : j £ Domu & (u(y) € Domi — » v — i(u(j))) & 

4- Dom? v = u(j))}. 

This construction is used to interpret a term or an atomic formula u: 
replace each nonlogical symbol by i of it. We construct the interpretation 
(*.«») of a general formula A in two steps. 

28.3 Thru. 3lg(g is a function &i Dom g — Formulas A & VB'\/C\/x(B € 
Domp & CeDornj & 1 is a variable — ► (l) L ••• Sz (5))), where 

1. Lng(B) < 8 • Ln B < LogB 8 & Sup #(£) < Max(Sup B, Sup z) + 
5 + V + --f u , 

2. B e Atoms ^ g(B) = B {t) , 

3. -B^Dom? -(?(~B) - ~g{B), 

4. -BvC G Domg ff[£vC) = ^SjVgjC), 

5. 3x5 € Domff -> ^(3x5) = 3x(u *x&;g(B)). 

Proof. Write a as an abbreviation for scope^\ g (28.3) but with Dom<7 — 
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Formulas^ replaced by Domg C Formulas A k \fB(B G Dom^ — * 
Formulas B C Domy), and let g — Maxga. We have a ff [0], so a holds 
by MAX. Suppose 

3B (B € Formulas A & J5 $ V>omg). 

By BLNP there exists a minimal such B . Clearly B Atoms A, so there 
exist £?, C, and x such that and C are formulas & x is a variable 
& (B = ^B V B = B\fC V Bo = 3xB), but this is impossible. Thus 
Domg = Formulas A and so scope 3!? (28.3). 
Suppose 6copc3i ? (28.3) ff [^i], and suppose 

3B {B G Formulas 4 & g(B ) ± gi {B )). 

By BLNP there exists a minimal such B , which is impossible. Thus g = gj, 
and thus (28.3). 

28.4 Def. A [i<Un] = (Min g scope 3]g (28.3))(A). 

28.5 Pe/. Univ(u ,a;') = {0>o*z'(i)) : j G Domi'}. 

28.6 £>e/. ^'""J = Impl(Univ(u ,Free,4) * (A {iiU()) )). 

Now we can define an interpretation of one theory in another. Again, 
proofs are included as part of the structure in order to obtain a bounded 
predicate symbol. 

28.7 Def. mteTp(i,u ,C',x",C",C",t l ,t 2 ) ^ *i and t 2 are theories & 
interpo(i, u , Lang t u Lang t 2 ) & C is a proof in £ 2 of 3Xo(u *X ) Sz 
Domx" = DomCJ,' = {/ G Lang^ : / is a function symbol} &; DomC" = 
Ax<! & (l) & (2), w/iere 

1. V/(/ G Domi" — > is an injective sequence of variables & 
Lnz"(/) - Index/ & Cq'(/) is a proof in £ 2 of 
Impl(Univ(u ^"(/)) * <u *i(/)*x"(/)*»), 

2. Vjifji G Ax*x -h. C;'(A) is a proof in t 2 of A^). 

Given an interpretation of one theory in another, we want a bounded 
function symbol that converts a proof of a theorem in the one theory into 
a proof of its interpretation in the other theory. We need two preliminary 
results. 
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28.8 Thm. interp(s, tt , C, x", C", C", t 1 ,t 2 ) & a is a term of Lang t x -+ 
D' 28 8 (i, u , x", C" , a) is a proof in of Impl(Univ(u , Free a) * {u *a(,))). 

Proof. Suppose hyp (28.8) and define 

r = {{6, Ln 6) : b E Terms a}, 
a' = Enumer(Termsa,r ), 

£' = {0",Impl(Univ(u O) Freea'(j')) * (u *a'{j) {i) ))) : j E Dome'}. 

Suppose 1 < j < Lna'. We distinguish two cases: 1. a'(j) is a variable and 
2. ^(a'(y) is a variable). Define 

D\ - u *a'(j)~u *a'{j), 

/ = W)(l)>, 
6' = Argo'(i), 

c' = {{M'(%)> : * e Dom6'}, 
Z^C*;'(/)*^ 56 (c>^ 

D' 3 = D'^ in case (^), for 1 < fi < 2. 
Thus 1 < j < Ln a' Z>J is a proof in t 2 [J3'[l,j - l]] of B'(j'). Define 

D' = {(j,^>:jeDom5'}*. 
Then con (28.8), and thus (28.8). 

28.9 Thm. interp(z, u , C, x", C" , C}', t\, t 2 ) & x' is a sequence of variables 
& A is a formula of Lang^ & Ran Free ^4 C Ran x' &; _D[, is a proof in i 2 
of Impl(Univ(u ,x') * (A (l , Un ))) -> D' 28 9 (z, u , C", x", Cj', x', .4, D' Q ) is a proof 
« 2 of A^ u "l 

Proof. Suppose hyp (28.9) and define 

y' = Enum{y E Ran i' : y ^ Ran Free A}, 
J9' - {{j,Impl(Univ(u ,y'b-,Lny']) * (A^))} : 
j E Domy' U {Lny' + 1}}. 

Suppose 1 < j < Ln y' and define 

= (B'U)) * (3y'(j)(tto*y , (j)^B , (j + 1))> * C * (3X (u *Xo)> * 
^ B . 3B («o*^o, X Q ,y'(j)) * (V(j)K*2/'(i))> * (B'(j + 1)). 

Thus 1 < j < Ln j/' D\ is a proof in t 2 [{B'(j))\ of £'(y + 1). Define 

D> = <J3'(1)> * {{j, D\) : j E Domy'}*. 
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Then con (28.9), and thus (28.9). 

28.10 Thm. (interpretation theorem) interp(z, u , C\ x", C" , C", ti, t 2 ) & 
D' is a proof in ti of A — » D' 2g 10 (z, u ,C',x", C", CJ', £>q) is a proof in < 2 of 

Proof. Suppose hyp (28.10) and suppose 1 < j < LnD' . We distinguish 
five cases: 

1. 3B3x3a(a is substitutable for x in B & Z)^(j') = B x \a]^3xB), 

2. is an identity axiom V D' {j) is an equality axiom, 

3. D' {j) e Axi 1( 

4. I?o(j) is a tautological consequence of D' \l,j — l], 

5. 3k(l < k < j &: D'o(j) can be inferred from D' (k) by 3-introduction). 

Define B, x, and a as in (1), and define 

y' = Enum{s/ E Ran Free (5 * a) : y ^ x}, 

^lo = ^ 8 . 8 (i>o,a:",C;,a) * (Imp](Univ(u ,t/') * {u *a ft) >)) * 
(uo*a(i)^(5( iiUll )) i ra (i )1^3x(tto*^&%u, 1 ))> * 
<Impl(Univ(ii ,y') * {(£(;,«„))* [«(.■)!) * {3x(u *x&B {iiUl)) )})) * 
(ImplfUnivfitcjr'J^D^y)^,))), 

2?i = Z>i 8 9(«'.«o,C",a: M ,C B i x , , J Di(i), J D' 10 ), 

^ = (^o(j)(,u„)>*WW (, ' U[,) >, 

x' - Free/y [l,i]*, 

= {<fc,^o(A) (,>,,) > • * C DomDi[l,J 1]} * 
(Impl(Univ( Wo ,x')*{^(i) (t , Ull) ))>, 

d\ = D[ 89 (i,u ,c>,x",c;;,x',D' (j),n' 40 ). 

Define A; as in (5), define Xo, C, and D as in 

3x 3C3D(xq is a variable & C and D are formulas & 
-(x is free in D) & D (k) = C~D & Z? (j) = 3x C~D), 

and define 

xi = FreeDJ(j), 

D's = (Impl(Univ(ti ,z' ) * (u Q *x ) * (C (tiUo) ) * <£> (l - tUll) ))) * 
(uo*£o&%u 11 )^Impl(Univ(tto,Xo) * (Z>( ffUll )))) * 
{3xo(u *x &C (tiU(l) )~Impl(Univ(u ,xi) * (D (l -, ttll) ))> * (D' (j)^), 
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D' e = D'p in case (fj,), for 1 < ^ < 5. 
Thus 1 < j < Ln D' -> D' & is a proof in 

t 2 [Ran{(/,Z7 (0 (, "' tt, ' ) } : / e Dom^[l,i - 1]}] 
of D' {j). Define 

^' = {<J,^):i€Dom^}*. 
Then con (28.10), and thus (28.10). 



Chapter 29 

The arithmetization of 
arithmetic 



Now we can begin to prove results about predicative arithmetic within 
predicative arithmetic. In this chapter we will arithmetize Robinson's the- 
ory and show it to be tautologically consistent (and we do this within a 
theory that is interpretable in Robinson's theory). 



29.1 


Def. 


= F ofi . 


29.2 


Def. 


S = F 1>0 . 


29.3 


Def. 


P = F M . 


29.4 


Def. 


+ = F 2 ,o. 


29.5 


Def. 




29.6 


Def. 


Sa = S * a. 


29.7 


Def. 


Pa = P*a. 


29.8 


Def. 


a+b = + * a * b. 


29.9 


Def. 


a~b = 7 * a * b. 



If x is the v th variable in alphabetical order, we use x as an abbreviation 
for X„. (Recall that u is S • ■ ■ SO with v occurrences of S.) Also, we use 
{ai,. . . ,a„} as an abbreviation for {ai} U • • • U {a„}. 
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29.10 Def. Q = {{6, S, P,J-, -},{Sx^6, Sx=S$~x=y, x+0=x^ 
x+Sy=S(x-(-y), z~6=6, T-$y=x~y+x, Px=y^Sy^xV(x^6&y=0)}) . 

29.11 Def. a is a variable-free term of / «-* a is variable-free & a is a term 
of/. 

29.12 77*m. a is a variable-free term of LangQ — »■ 3!/(/ is a function & 
Dom/ - Terms a & V6Vc(6 G Dom / & c G Dom/ (l) & & 
(6))), u^ere 

1. /(&) < Expln(2,6) < 6, 

2. /(0) = 0, 

3. S&G Dom / -> /(§&) - S/(6), 

4. P&G Dom/ ^ /(P6) = P/(6), 

5. 6+c € Dom / /(6+c) = /(&) + /(c), 

6. b~c G Dom / /(6-c) = /(&) • /(c). 

Proof. Suppose (29.12) and write a as an abbreviation for 

scope 3 < f (29.12) 

but with Dom / = Terms a replaced by 

Dom / C Terms a & V6(f> 6 Dom / -> Terms 6 C Dom /) . 

Let / ~ Max / a. We have a: Dom / < Terms a, Sup / < a and we have 
ct/[0], so a holds by MAX. 

Suppose 3d(d G Terms a k, d ^ Dom/). By BLNP there exists a min- 
imal such d. Then there exist b and c such that d = V [b G Dom/ & 
c G Dom / & (rf = S6 V d = P6 V d = 6+c V d = b'c)). 

Suppose d = and let /i = / U {(0,0)}. Then a/[/i], so f 1 < /, a 
contradiction, and thus d ^ 0. 

Suppose d = S6 and let /! = / U {(§6, S/(6))}. Then 

/j(S6) = /(6) + 1 < 2 Lni + 1 < 2 Lnh < S6, 

so otflfi] and thus d ^ Sb. 

Suppose d = Pb and let /j = / U {{P6, P/(6))}. Then 

AfPfc) - /(&) - 1 < 2 Ln6 < 2 Ln ™ < P6, 
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so and thus d ^ Pb. 

Suppose d = b+c and let /i = / U {(b+c, f(b) + /(c)}}. Then 

f Y (b+c) = /(6) + /(c) < 2 Lni + 2 Lnc < 2 Lnb+Lnc < 2 Ln ( 6 + c > < 6+c, 

so 0£/[/i] and thus d ^ b+c. 

Hence d = b~c. Let f 1 = / U {(& : c,/(6) ■ /(c))}. Then 

/j^c) = /(6) • /(c) < 2 Lnfc • 2 Lnc = 2 Lnfr+Lnc < 2 Ln ( 6Tc ) < 6-c, 

so ct/[/i] and thus Dom / = Terms a, and we have scope^j (29.12). 

Suppose scope 3] f (29. 12) and suppose 3d(d €E Termsa & /(d) ^ 
/i(rf)). By BLNP there exists a minimal such d, which is impossible. Thus 
/ = / 1; thus con (29.12), and thus (29.12). 

29.13 Def. Valfna = / <-> /iyp(29.12) & scope 3!/ (29.12), otherwise / = 1. 

29.14 Def. Vala = Valfna (a). 

29.15 Def. A is a variable-free formula of / «-* A is variable-free & A is a 
formula of /. 

29.16 Thru. A is a variable-free formula of Lang Q & B E Atoms A — > 
z3a36(a and 6 are variable-free terms of Lang Q Q B — a=b). 

Proof. Suppose hyp (29.16). Then (B{1)} is a predicate symbol, so 
{B(l)} = =. Hence there exist a and b such that a and b are variable-free 
terms of LangQ Q & B -= a=6. Thus (29.16). 

29.17 77im. A is a variable-free formula of Lang Q —> 3lv(v is a truth 
valuation on A & VaV6(a~& G Domu — > (i>(a^6) = 1 Vala = Val6))). 

Proof. Recall the defining axiom (24.6) for truth valuations. Write a 
as an abbreviation for scope^ (29.17) but with u v is a truth valuation on 
A" replaced by rks (24.6) U [A] but with Domt? = Formulas A replaced in 
it by Domn = Formulas A &; VB(B G Domt; — * Formulas B C Domv). 
Suppose hyp (29.17) and let v — Max v a. We have a: Domi; < Formulas A, 
Supv < 1 and we have a„[0], so a holds by MAX. Suppose 

3B{B £ Formulas A & B $ Domv). 
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By BLNP there exists a minimal such B. By (29.16) there exist a, 6, C, 
and D such that a and 6 are variable-free terms of Lang Q & (B = a=b 
v(CeDomi) & DeBomv & (B — VB = C\/D))). 

Suppose B — a=b. There exists z such that (z — 1 *-+ Vala = Val6) 
& (z = <-> Vala ^ Val6). Let = t; U {<£,z}}. Then a v \vi], so U! < v, 
a contradiction, and thus B ^ a=b. 

Suppose B = ~C and let u x = i; U {(£, 1 - v(C))}. Then a„[vi] and 
thus B = CvD. 

Let = n u {(B,Max(r(C),i;( J D)))}. Then a w [t>i], which again is a 
contradiction, and thus scopes (29.17). 

Suppose scope 3]v (29.17)„[vi] and suppose 

3B(B e Formulas^ & v(B) / v x (B)). 

By BLNP there exists a minimal such B, which is impossible. Thus v = v t , 
thus con (29.17), and thus (29.17). 

29.18 Def. TruthfnA = v <-> hyp(29.17) & scope 3]v (29.17), otherwise 
v = 1. 

29.19 Def. Truth A = Truthfn 4(A). 

29.20 Thm. A is a variable-free formula of LangQ & [B is an identity 
axiom V B is an equality axiom V B £ Ax Qo) & ^ is an instance of B 

Truth A = 1. 

Froo/. Suppose hyp (29.20), and let v = Truthfn A. 

Suppose 1: B is an identity axiom. Then there exists a such that a 
is a variable-free term of Lang Q k, A = a=a. Then v(A) = 1 since 
Vala = Vala. Thus (1) con (29.20). 

Suppose 2: B is an equality axiom. Then there exist a 1? b x , a 2 , and 
62 such that a 1; 61, a 2 , and 62 are variable-free terms of Lang Q &i 
(A = 6=6 V A = a^V^Sa^S&T V A = ai=6 1 ^>Pai=P6 1 V A = 
<*i — 6i^a 2 = & 2 ~ai+a 2 ~ &1+&2 V A = ai=&i~a2=&2~ a i~ a 2— &i~&2 V A = 
Gi— &i~a 2 ^ 6 2 c ^a 1 ^ a 2 ~&i— b 2 ). Then v(A) = 1 and thus (2) — ► con (29.20). 

Suppose 3: B € AxQ . Then v(A) = 1 and thus (3) -> con (29.20). 
Thus (29.20). 

29.21 Def. A is an open formula *-*■ A is a formula & ->(3 occurs in A). 
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29.22 Dtf. t is an open theory «-> Ms a theory & Ax t is a set of open 
formulas. 

29.23 Dtf. Neg A' = {(i,~A'{i)} : i E DomA'}. 

29.24 Dtf! t is tautologically consistent <-»■ t is an open theory & ->3A'(A' 
is a sequence of formulas of Langt & DisjNeg^' is a tautology & 
VA(A E Ranyl' — * 3B{(B is an identity axiom V B is an equality axiom V 
B € Axt) & A is an instance of B))). 

29.25 Dtf. Sub (A,e) = A FreeA f {{i, e> : i € Dom Free ,4)1 . 

29.26 TTim. (J is tautologically consistent. 
Proof. Suppose scope 3A > (29.24) t [Q }. Let 

A' = {{i,Sub {A'(i),b)) : i e Dom.4'}, 

and let v = Truthfn Disj Neg A' . Then A £ Ran A' -> v(A ) = 1, by 
(29.20), so v(Disj Neg A' ) = by (24.20). This is a contradiction, and thus 
(29.26). 



Chapter 30 

The consistency theorem 



We have already discussed the Hilbert-Ackermann Consistency Theo- 
rem of [Sh,§4.3] in connection with Assertion 18.1. This theorem is basically 
an algorithm for eliminating quantifiers from proofs. The first step is to 
eliminate each use of 3-introduction; this is done by introducing special 
constants and special axioms. Then the formulas belonging to special con- 
stants are eliminated, beginning with special constants of maximal rank. 
We follow [Sh,§4.3] closely. 

30.1 Def. spconstseq(r', x', C\t) *-> r' is an injective sequence of constants 
&z x' is a sequence of variables & Ln r' — Lux' — LnC Sz {(i,3x'{i)C'(i)} : 
i G Domr'} is a sequence of closed formulas h VW/(1 < i ' < j < Ln r' 
— ► ->(r'(i) occurs in C'(j))) & t is a theory & Langi n Ran r' = & 
NlsC* C Lang tu Ran r r & Supr' < F 0MLnr >. 

30.2 Def. ideqax(A,f) <~> \/v(v £ Nls A — + v E Langt V v is a constant) & 
3£(A is an instance of B & (5 is an identity axiom V B is an equality 
axiom V B e Ax*))- 

30.3 Def. belongs(A,r,r',a;',C') <-> < i < Lnr' & r'(«) = r h 
(A — 3x'(i)C'(i)^C'(i) x i^\r] V 3a{a is a variable-free term & 

30.4 Def. Rank A = Deg(3, A). 

30.5 Z?c/. delta(A',r',x',C',f,n) spconstseq(r', x\ C",t) k A' is a se- 
quence of closed formulas & Nls A'* C Lang^URanV & VA(A G 
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Ran A' ideqax(A,*) V 3i{l < i < Ln r' & Rank 3a;'(t)C"(i) < n & 
belongs^, r'(z),r',x',C'))). 

30.6 £>e/. delta^'y^C",*,^) delta(^', r', x', C", t, n) & 
Ran{(i,33:'(z)C'(2)-C"(0x'( t )fr'(01> : t € Domr'} C Ran A'. 

30.7 Z?e/. delta (,4',i,rc) <-► 3r'3x'3C" delta a (A', r', x', C, t, n). 

We have r As (30.7): Lnr' < Ln.4', Supr' < F 0ii+hnA >, Ln x' < Ln.4', 
Sup x' < Sup ,4', Ln C < Ln A', Sup C < Sup A'. 

30.8 77im. £>' is a proof in t of A & ^4 is a closed formula & 

Sup Rank o D' < n & s(2 | Ln £>') -> 3,4'(Ln 4' < (2 | Ln D') ~ 1 & 
SupLn o A' < 2 • SupLn oD' &; delta (v4',<, n) & A is a tautological 
consequence of A'). 

(See Lemma 1 of |Sh,§4.3].) Proof. Suppose hyp (30.8). There exists / 
such that exp(2,2 | Ln £>',/). Let k = 2 | 2 | Ln£>', let 

r' = {{i,F 0jt+i ):i£DomD'}, 

and write a for 

3r|,(LnrJ = Ln Free & Ran r' C Ran r% Ln £>'] & 

A = £>'(0FreeD'(0koD- 

We will prove that 

1. 1 < i < LnD' -> VA (a ^ 3A^(Ln^ < /(i) - 1 & Ln A' Q < Log A; 
& Ln Sup A' < SupLn o A' < 2 SupLn o/)' < Log ((MaxmLn o D') 2 ) & 
SupSupyig < SupSupD' -+ Fo^+i & deltaof^o?^ n) & A is a tautological 
consequence of A' )). 

Suppose 3z^(l). By BLNP there exists a minimal such i. Suppose 

2. D'(i) e Axt V D'(i) is a logical axiom 

and suppose a. Let A' — (Aq). Thus (l), a contradiction, and thus ^(2). 
Suppose 

3. D'(i) is a tautological consequence of D'\l,i — l] 

and suppose a. Then there exists r' Q such that scope^ a. Recall the defin- 
ing axiom (29.25) for Sub , and let 

D' = {(j,Subo( J D , (j) P veeD'(of r ol. r '(0)) : 3 e DomD'[l,i'-l]}. 
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Then A is a tautological consequence of D' . Let 

D'l = {(j,MmA' scope 3K (1),- D' Q (j)}) : j E DomJ%} 

and let A' — D'{* . Thus (l), a contradiction, and thus ^{3). Therefore 
=i?(l < j < i & can he inferred from D'(j) by 3-introduction), 

so there exist j, k, and C such that 

1 < J < i & x is a variable & B and C are formulas Si 
-(x is free in C) & D'[i) = 3xB^C & D'{j) = B~C. 

Suppose a, so that there exists r' Q such that scope^ a. Let 

B = BFreeD'f.J^o], 
Co = CFreeD'(t) ^ol ) 

so that A — 3xB ~C . There exists A\ such that 

scope 3K (\) iA »,A\\h B 0x \r'(j)}^C Q ,A\Y 
Let A' Q = A\ * {3xBo~B 0x \r'(j)]). Observe that 

Ln 3xB ~B 0x \r'(j)] = 2 • Ln B + 4 < 2 - Ln Z>'(i). 

Thus (1), a contradiction, and thus (l). Let i — LnD' and let A = A. 
Since A = L>'(z) we have con (30.8) by (1), and thus (30.8). 

30.9 Def. A' is a special sequence <-> ,4' is a sequence of formulas h 
Disj Neg ^4' is a tautology. 

30.10 Thru, e is a constant & D' is a proof in f of e^e & Sup Rank oD' < n 
& s(2 T LnD') — »■ BA'fdeltaof^l', /, ri) & ,4' is a special sequence & 
\,nA , <2}D' & SupLn o ,4' < 2 ■ Sup Ln o £>'). 

Proof. Suppose hyp (30.10). By (30.8) there exists A' Q such that 
delta (Ao, t, n) & Ln A'^ < (2 j D') — 1 & e^e is a tautological consequence 
of A' . Let A' = A' Q * (c^e). Then con (30.10), and thus (30.10). 

30.11 De/. Belongs(A',r',x',C",7i) = {r G Ran r' : 3j43i(^ G Ran A' & 
l<i<Lnr' & r'(t)=r & belongsfA, r, r', x\ C") & 
Rank3x'(z)C'(0 = n)}. 

30.12 De/- spdelta(A', r', a;', C',*,?i,m,Z) +-» deltafA', r', x', C, £, u) & 
CardBelongs(A',r',x',C'n) = m h Ln A' < / & Ln r' < / & SupLnoA' < 
/ h SupLn o C' < I Sz t is an open theory & A' is a special sequence. 
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In [Sh,§4.2], the special constant r for the closed instantiation 3xA is 
denoted by the letter c with the subscript 3xA. This is a beautiful device, 
which is exploited in the proof of the Consistency Theorem, but a direct 
arithmetization of it would lead to explosive growth in the size of special 
constants. Notice that the formula A may itself contain a special constant s. 
Now r may occur in an expression u without s occurring in u, but s will 
appear in u in the subscript of r. The following defining axiom expresses 
this notion. 

30.13 Def. appears(r, u,r',C") <-> 3j'{Lnj' < Lnr' & Supj' < Supr' & 
r'(j'(l)) = r & Vj(l <j< Lnf -> r'{j'{j)) occurs in C'{j'(j + 1)) & 
r'(j'(Ln j')) occurs in u)). 

30.14 Thru. u occurs in u & v is a truth valuation on u — ► 3v(v is a 
truth valuation on u & v C v). 

Proof. Suppose hyp (30.14). Write a for 

Domvo C Domv C Formulas u & Supv < 1 & \/B(~B € Domv 
B e Domv & v(~B) = 1 - v{B)) & V£VC(£ and C are formu- 
las & B\/C G Domt) ^ B e Domv & C E Domv k v{B\tC) = 
Max(v(5),v(C))), 

and let v = Max v a. We have a„[v ], so a holds by MAX. Suppose 

3B{B e Formulas u & B $ Domv). 

By BLNP there is a minimal such B. Suppose 1: B is an atomic for- 
mula V (B(l)) = 3, and let vi = v U {{B,0)}. Then a^vi], so v x < v, a 
contradiction, and thus ^(l). Therefore there exist B\ and C\ such that 
e Domv & Ci G Domv & (B = "flj v fl = BiVCj). Suppose 
.B = ~Bj, and let v x = v U {{.£?, 1 — v(B\))}. Again we have a contradiction, 
and thus B = B^C^ Let v Y = v U {{B, Max(v(5x), vfCx)))}. This gives a 
contradiction, and thus Domv — Formulas «. Thus (30.14). 

30.15 Thm. spdelta(>l',r',x',C',*,ra,m,/) & m ^ -> 
aA^r^x^C^spdeltafA^r^x^C^^n^- l,/ 2 ) & Sup (^* * CJ*) < 
Sup (^'* *(?'**»■£*) & Sup^ < Supx'). 

(See Lemma 2 of [Sh,§4.3].) Proof. Suppose hyp (30.15) and suppose 

1. {(i,3x'{i)C'(i)) : i £ Dom C'} is injective. 
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Let 

i\ — Mini(l <i< Lnr' k r'(i) G Belongs (A', r', x',C\re)), 
r = r'(i 1 ) I 
x = x'(z'i), 
B = C'{i 1 ), 

A\ — Enum{4 E Ran A' : -> belongs (A, r, r', x, C")}, 

A' 2 = Enum{A e Ran A' : belongs^, r,r', x\ C) k A± 3xB^B x \r]}, 

a' = {{j,a} : j € Domij k min A' 2 (j) — B a \a]^3xB}. 

Then 

2. A\ = {(i,£f4a'(y)l~5xB) : j E Doma'} 

and 

3. Ran(Ai * A' 2 ) C Ran A' C Ranf^', * * (ElxB^Bjr"!)). 
We will prove that 

4. 1 < « < l>nA[ — > occurs in ^(t)). 

Suppose ^(4). Then is an open formula), and since t is an open 

theory, -^ideqaxfyl'jfz), t) . Therefore there exists 5 such that 

belongsK(z), S ,r',x',C7'). 

There exist y, C, and a such that 

!/ is a variable k C is a formula k a is a variable-free term k 
(A\(i) = 3yC~C y \s] V A\(i) - C y \a]~3yC). 

But since Rank 3xB — n, it follows that ~^{3xB occurs in C y [s] V 3xB 
occurs in C y \a\). We have 3xB 3yC by (1), so -*(3xB occurs in 3yC). 
Thus implies (4), and hence (4). 

We want to express the notion of replacing each occurrence of 3xB by 
B x \r]. We will prove that 

5. dff(Dom$ = Formulas DisjNeg 4') k WAV A l WA 2 \/z( A e Bom g k 
A x (E Doing k A<i G Doing k z is a variable — > (i) k •■■ &: (vii)), 
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i. Ln g(A) < Ln A, 

ii. Sup g(A) < Sup .4 + r, 

iii. A is an atomic formula — > g(A) = A, 

iv. A = 3xB g(A) = B x \r], 

v. A = -* = 

vi. ^ = AiV^ ~+ g(A) - $Ui)V0(A 2 ), 

vii. ,4 = 32Ai & A / 3x5 ff (A) - 3zg(A x ). 
Write a as an abbreviation for scope^ g (5) but with 

Doiri0 = Formulas Disj Neg A' 

replaced by 

Dome? C Formulas Disj Neg A' & \/A{A G Domg — > Formulas j4 C 
Domj), 

and let g — Max#a. We have a fl [0], so a holds by MAX. Suppose 

3^4(^4 G Formulas Disj Neg A' & A £ Domg). 

By BLNP there is a minimal such A, which is impossible. Thus scope^ g (5), 
and hence (5). 
Let 

A> 3 = {(j,B t \a'(j)]^B t \r]) : j e Doma'}. 
We will prove that 

6. A\ *■ A3 is a special sequence. 
(See (1) of [Sh,§4.3].) Suppose v is a truth valuation on Disj Neggro A'. Let 

t; = {{A,v(g{A))} : A e Domg}. 

Then v is a truth valuation on Disj Neg A', so there exists i such that 
1 < i < LnA' & v {~A'{i)) = 1. Therefore v(~g(A'{i))) = 1, and so 
v(Disj Neg o A') — 1. Thus g o A' is a special sequence. Recall (3). We have 
goA'^Aibyi^goA'^A's by (2), and g(3xB=*B t \r]) = B x \r]^B x \r], 
so that g(3xB°^B x [r]) is a tautology. Hence (6). 

We want to express the notion of replacing r by a'(j) everywhere it 
appears, including appearances in subscripts of special constants. Let 

r[ = Minri(Lnri = Lnr' • Ln a' < Log(r' # a') & Supri < F 0j<+/2 & 
r[ is an injective sequence of constants &: Ran n (Langt U Ran r') — 0), 



168 



30. THE CONSISTENCY THEOREM 



r" = {0',{<*>i((i - 1) • Lnr' + t)>: i G Dornr'}): j G Doma'}, 

q = {i e Dornr' : appears (r, C'(i), r', C')}, 

= {<J,{<«,r 2 > :te Dornr' & (t g q -* r 2 = r'(z)) & 
(t €E a -» r 2 = r;'(y)(0)}>: j G Doma'}, 

^' - {(jWM.SubjSsuM^^'.rJO'JJ.^a'y))): A G Formulas (4*^)*}): 
j E Doma'}. 

(To compute h'(j)(A), first replace all the special constants r'(z) such that 
r appears in C'{i) by the new special constant r"{j)(i) and then substitute 
a'(j) for each occurrence of r.) Let 

A; = {(j,{{k,ti(j)(B x \a'(k)])~B x \a'(j)]): k G Doma'}}: jG Doma'}. 

Suppose 1 < j < Lna'. Since A\ * A' 3 is a special sequence, o (^' x * 
is a special sequence. But h'(j)(B) = B since -> appearsfr, B, x\ C"), so 
M) = 5ja'(j)T. Thus 

7- 1 < j < Ln a' — > (h'(j) o yi'J * is a special sequence. 

(See (2) of [Sh,§4.3].) 
Let 

^0 = A\ * o A\) : j G Doma'}*. 

We will prove that 

8. is a special sequence. 

Suppose -*(&). Then there exists v such that 

vq is a truth valuation on DisjNegAg &: VWj(l < i < Lnr' & 
1 < j < Lna' - ^(^'(0) = 1 & ^(V(i)(^(z))) = 1). 

By (30.14) there exists v such that 

v is a truth valuation on Disj Neg A' * {(j, A"(j)*) : j G Doma'}* & 

vo Q v. 

Suppose 1 < j < Lna'. By (7), 

3k(l < k < Lna' & ^^'(j)) (5ja'(A;)l) ^Bja'(i)l ) = 0. 
Therefore v(B x \a'{j)}) = 0, and thus 

1 < j < Lna' - «(B x [a'(y)l^Bjrl) = 1. 
This contradicts (6), and thus (8). 
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Let 

r l = {(i,rJ>:*GDomr' & [i $ q - r' 3 = (r'(t))) & 
(«■ <E * -> rj = {r'(z)> * {0>;'(j)(0> : j e Doma'}))', 

4 = {(*\4) : * G Domr' & (i : g -► x' 3 = (x'(z'))) & 
(t € 4 = (x'«) * {(y,x'(0> : J G Doma'})}*, 

C = : i e Domr' & (i £ g -» C?i = (C'(t))) & 

(i G <? - CJ = (C'(f)) * {0^'(i)(C'(0)) r 3 G Doma'})}*. 

Then spconstseqfrjj, z' , C' Q , t), LnA' < I 2 , Lnr' Q < / 2 , SupLn o A' < / 2 , 
Sup(A * *C' Q *) < Sup (A'* * C * *r' ), and Supx < Supx'. We will prove 
that 

9. Aq E RbilAq —* ideqax(A ,<) V Bs (so G RanrJ, &; 
belongs(A 0> 5 ,4,x|„Ci) & (js G Belongs^, rj,, x' , C , n) -» 
5 G Belongs^', r',x', C", n) & 5 ^ r)). 

Suppose -^(Q). Then Aq ^ Ran^, so there exist j and A: such that 1 < 
j < Lna' & I < k < Lna' & A = h'ij^A'M), Let A = A[{k). We 
have ideqax(y4,<) -+ ]deq&x(Ao,t), so "^deqaxfA, t). Therefore there exists 
i such that 1 < i < Ln r' & be]ongs(^4,r'(i),r',x',C"). Let s = r'(z'), let 
y = x'(z), and let C — C'{i). There exists a such that 

A = 3yC-^C v [sl v A - C tf [a"|~3yC. 
Let C = h'{j){C), let s ^= h'(j)(s), and let a = h'(j)(a). Then 

.4 = 3j/C ^>Co v [s "l v Aq — C 0y \ a ]^3yC . 
We have s ^ r, so theje exists i such that 

1 < t < LnrJ, & s = r' (i ) & C = C' [i ) & y - x ( l 'o)- 

Hence belongs(A ,So, r , Cj). Suppose $ G Belongs(Ao, r' , x' 0J C' , n). Then 
RankBt/C = Rank3yCo = n. By definition of 2 - i and (30.1), 

-i appears(r, 5, r', x', C) 

and so $0 = h'{j)(s) = s. Thus (9), a contradiction, and thus (9). Hence 
spdelta( J 4 , r , x' , CJ, £, n, m - 1 , / 2 ) . 
Thus (1) -+ con (30.15). Now let 

i' = Enum{i E Domr' : < j < i & 3x'(j)C'(jf) = 3a:'(t)C"(i))}, 
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x' 5 = x' o i\ 

r' 6 ={(i,r>(j)}:ieT>omr< & mm, (lx'( 3 )C'(j) = 3x'(i)C'(i))}, 
CI = {(k,SsvLb(C'{i'(k)),r',r' & )} : k G Domt'}, 
A[ = {(t,Ssub(i4'(t), r'.rj)) : * £ Dom A'}. 

Then spdelta(A' 5 ,r5,X5,C5,f,n, m, /) & (lJ^c'KCj]. Hence con (30.15), 
and thus (30.15). 

30.16 Thm. spdelta(yl', r',x', C",£, n, m, /) & & gr(2 | /) & 

e(f T 2 T /) 3A' 3ri3xi3Cj3m (spdeIta(^,r^4,Cj,i,n-l,mo,/ T 2 j /) 
& Sup (4,* * CJ*) < Sup(X'* * C'* * rj) & Sup if, < Sups'). 

Proof. Suppose hyp (30.16). Observe that m < I. Clearly m - — > 
con (30.16), so suppose m 7^ 0. There exists / such that exp(2,/,/) and 
there exists g such that exp(/,2 f /,<?). Let h = g o f and /c = 2j/|2|/. 
We will prove that 

1. 1 < i < m a^iarlBiiaCKspdelta^i,^, xi,C7;,i,n,m - t',/i(i)) 
& Sup(4* *CJ*) < Sup(j4'* *C'**rl) & Supx'j < Sups'). 

Let a = Max(Sup(4'* * C'*), F , i+L ogik). We have 

(1): Ln.41 < Log k, LnSupyi', < Log/c, SupSupylj < a, Lnri < Log/:, 
SuprJ < a, Lnx'j < Log/:, Sups^ < Sup or', Ln C[ < Log A;, LnSupCJ < 
Logfc, Sup Sup C[ < a. 

Suppose 3z'->(l). By BLNP there exists a minimal such t, which is impos- 
sible by (30.15). Thus (1). By (l),-[m - 1] and (30.15) we have con (30.16). 
Thus con (30.16), and thus (30.16). 

30.17 Def. expcomp(/,n,/) +-> Vi(i £ Dom / ^ i < n) & /(0) = / & 
Vi(i < n — ► 3a(a < /(i-f 1) & Log a is a power of two &; LogLoga = /(i) 
& + = Explog(/(t),a)). 

30.18 Thm. expcomp(/, n, /) <-* Vi(i 6 Dom / Hj<n) & /(0) = / & 
V,'(i < n - e(/(0) & £(2 T /(*)) & /(« + 1) = /(0 t 2 T /(»))• 

Proo/. From (30.17). 

30.19 Def! o G (l,n) <-* 3f expcomp(i, n, /). 

30.20 Thm. li < I k. n\ < n & a (/,n) — + ^of/i,^). 

Proof. Suppose hyp (30.20). There exists / such that expcomp(/,n, /). 
Let g = {(i,f(i)} : i £ Dom/ & i < n^. Then expcomp(/, n !,«?). We will 
prove that 
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1. i <ni a/ifexpcompf/!,^^) & < t < 

Suppose Eli^(l). By BLNP there exists a minima] such %. Clearly i ^ 0. 
Therefore there exists hi such that scopes (!)»,*»[* — Let h — hi U 

{{t, - 1) t 2 t - I))}- Then (l), a contradiction, and thus (l). By 
(l) t -[»i] we have ^o(^i,^i) : and thus (31.20). 

30.21 Thm. (J {l,n) & A; < / t 2 T / o (k,n - 1). 

Proof. Suppose hyp (30.21). There exists / such that expcomp(/, n, /). 
We will prove that 

1. i < n - 1 -> 3/i(expcomp(A;,i» & Vj(j < i -+ h(j) < f{j + l))). 

Suppose Eh'-^(l). By BLNP there exists a minimal such i. Clearly i ^ 0. 
Therefore there exists h\ such that scopejh — Let /i = /ii U 

{ (*\ - 1) T 2 | /ii(z - 1))}. Then (l), a contradiction, and thus (l). By 
(l)i[n - l] we have o (k,n — 1), and thus (30.21). 

30.22 Thm. spdelta^', r', x\ C , t, n, m,l) & o {l,n+ 1) is a 
special sequence k, VA (A € Ran^ ~^ ideqax(A ,£))). 

Proof. Suppose hyp (30.22). There exists / such that 

expcomp(/, n + 1,/). 

Then e(f{n)). Let k - 2 ] f(n). We will prove that 

1. i < n — > Byi'jBrJBzjBCiBmitspdeltafA^rjjZ^C^^n - i, mi,/(i)) 
& Sup(>li**c;*) < SupfA'* *C* *rl) & Sup ^ < Sups'). 

Let a = MaxfSup^'* * C'*) , F 0|t+L ogjt)- We have 

(1): Lni'j < Log/c, LnSup^i < Logfc, SupSup^i < a, LnrJ < Log/c, 
SuprJ < a, LnxJ < Log A:, Supz'j < Supx', Ln C[ < Log A:, LnSupCJ < 
Log A;, Sup Sup C[ < a, m x < Log A;. 

Suppose 3i— '(1). By BLNP there exists a minimal such i, which is im- 
possible by (30.16). Thus (1). By (1),H we have con (30.22), and thus 
(30.22). 

30.23 Thm. t is an open theory & D' is a proof in t of X Q =£X & 
k = Max(2 t {LnD' + 2), 2 • Sup Ln o £>') & = Sup Rank o D' & 
<7 (/c,n + 1) — ► is tautologically consistent). 

Proof. Suppose hyp (30.23). Let t - (Langi U {0},Axt} and let D' = 
D'*{X ^X }*(0^0). Then D' is a proof in t of 6^6. Observe that Ln jDq = 
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Ln£>' + 2, so that 2 | LnD' Q < k. Also, SupLn oDJ = Max(SupLn oP',4). 
But since Ln D' > 1 we have k > 2 s = 8 = 2-4, so that 2 • Sup Ln o D' Q < k. . 
By (30.10) there exists A' such that 

de\ta,(A' Q ,to,n) & A'q is a special sequence & Ln^o < A: &; 
Sup Ln o A' < k. 

There exists r' Q , Xq, and C' such that deltaifv^r^x^CJ,^,"), so there ex- 
ists m such that spdelta(Ag, rj, x' q , C' ,t),n, m, &). By (30.22) there exists A\ 
such that A \ is a special sequence <fe V^f^ £ Ran^lj — ► ideqaxfAj,^))- 
Let 

r[ = Enum{r 1 e Nls^J* : r l Langf}, 
ii = {(j,X > >:ieDomri}, 
A' = {(i\Ssub(^i(t'),ri»si)> : lEDomA^}. 
By (30.22) we have con (30.23), and thus (30.23). 

30.24 Def! o(n) <r (n,n). 

30.25 J9e// £ is a-consistent <-> -^3D'(Z)' is a proof in i of X Q ^X & 
<r(Ln Z>'*)). 

30.26 Thm. [consistency theorem) t is tautologically consistent £ is <j- 
consistent. 

Proof. Suppose ~> (30.26). There exists D' such that scopes (30.25). 
Let k = Max(2 T (Ln D' + 2),2 • SupLn o £>') and let n = Sup Rank c £>'. 
Then n < Ln o £)'* - 2 and /c < Ln£>'* | 2 | LnL>'*, so by (30.20) and 
(30.21) we have a {k,n + 1). This contradicts (30.23), and thus (30.26). 

30.27 TVim. Q is a-consistent. 
Proof. By (30.26) and (29.26). 



Chapter 31 

Is exponentiation total? 



Why are mathematicians so convinced that exponentiation is total (ev- 
erywhere defined)? Because they believe in the existence of abstract objects 
called numbers. What is a number? Originally, sequences of tally marks 
were used to count things. Then positional notation — the most powerful 
achievement of mathematics — was invented. Decimals (i.e., numbers writ- 
ten in positional notation) are simply canonical forms for variable-free terms 
of arithmetic. It has been universally assumed, on the basis of scant evi- 
dence, that decimals are the same kind of thing as sequences of tally marks, 
only expressed in a more practical and efficient notation. This assumption 
is based on the semantic view of mathematics, in which mathematical ex- 
pressions, such as decimals and sequences of tally marks, are regarded as 
denoting abstract objects. But to one who takes a formalist view of math- 
ematics, the subject matter of mathematics is the expressions themselves 
together with the rules for manipulating them — nothing more. From this 
point of view, the invention of positional notation was the creation of a new 
kind of number. 

How is it then that we can continue to think of the numbers as being 
0, SO, SSO, SSSO, . . .? The relativization scheme of Chapter 5 explains 
this to some extent. But now let us adjoin exponentiation to the sym- 
bols of arithmetic. Have we again created a new kind of number? Yes. 
Let b be a variable-free term of arithmetic. To say that the expression 
2 b is just another way of expressing the variable-free term of arithmetic, 
SSO ■ SSO • . . . • SSO with b occurrences of SSO, is to assume that b denotes 
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something that is also denoted by a sequence of tally marks. (The notorious 
three dots are a direct carry-over from tally marks.) The situation is worse 
for expressions of the form 2 j 2 f b — then we need to assume that 2 b itself 
denotes something that is also denoted by a sequence of tally marks. 

Mathematicians have always operated on the unchallenged assumption 
that it is possible in principle to express 2 b as a numeral by performing the 
recursively indicated computations. To say that it is possible in principle is 
to say that the recursion will terminate in a certain number of steps — and 
this use of the word "number" can only refer to the primitive notion; the 
steps are things that are counted by a sequence of tally marks. In what 
number of steps will the recursion terminate? Why, in somewhat more than 
2 b steps. The circularity in the argument is glaringly obvious. 

Although e(u) is inductive, one cannot prove \fne:(n) in predicative 
arithmetic. Here are three arguments for this assertion. 

First, take a nonstandard element a of a nonstandard model of Peano 
Arithmetic. Then the set of all elements less than 2 f Log a j k for some 
standard k will be a model of Q A \3n-^e{n)}. This is essentially Theorem 4.3 
of Parikh's article Existence and feasibility in arithmetic [Pa], which ex- 
presses a viewpoint on the foundations of mathematics similar to the one 
developed here. This argument is model-theoretic; it shows how from a 
proof of Vner(n) in Q' 4 to derive a contradiction in set theory. 

Parikh also proves essentially the following (Theorem 4.4 of [Pa]): Let D 
be a bounded formula such that Hq 4 3yD. Then for some bounded term b 
not containing y, Hq 4 3y(y < b & D). 

As Sam Buss pointed out to me, this can be used to give a second 
proof that \/ne{n) is not a theorem of predicative arithmetic. Let us use 
h A to mean that A is a theorem of an extension by definitions of Q 4 . Of 
course, h \fne(n) if and only if h e(n), and h e(n) 3f exp(2,n,/). But 
by Parikh's Theorem 4.4, if Kq 4 3/ exp(2, n, /), then there is a bounded 
term b of Q 4 not containing / such that hg 4 3/(/ < b & exp(2,n,/)). 
Since h^ 4 exp(2,n,/) — > f(n) < /, we would have h 2 n < b, which is 
impossible. 

Parikh's proof of Theorem 4.4 is fmitary but impredicative. It uses 
Herbrand's Theorem, and the bound on b is superexponential in the number 
of occurrences of symbols in the proof of 3yD. The second argument shows 
how from a proof of Vn£-(rc) in Q\ to derive a contradiction in a theory 
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containing Herbrand's Theorem. 

In the definition in Chapter 7 of a bounded extension we required, for 
each defining axiom of a function symbol with right hand side D, that 3yD 
be of bounded form. Since we have the existence condition it would suffice, 
by Parikh's Theorem 4.4, to require only that D be of bounded form. But 
in the absence of a predicative proof of Theorem 4.4 it would be unwise 
to make only this weaker requirement. As we have developed predicative 
arithmetic, the proof that it is locally interpretable in Q can be arithmetized 
within the theory itself. 

The third argument, which will be outlined now, shows how from a 
proof of Vne(n) in predicative arithmetic to produce a contradiction in 
predicative arithmetic itself. 

31.1 Thru. Vn,er(n) — > ind n o(n). 

Proof. Clearly o(0). Suppose ^ns(n) and suppose o{n). Then there 
exists / such that expcompfrc, n, /). Let 

ff = /U{(n + l,/(n)t2t/(B)>}. 

Then, since Vnefn), we have expcomp(n,n + 1,</). Let 

h = g U {{n + 2,g{n + 1) T 2 T g(n + 1))}. 

Then expcomp(n, n + 2,/i), and so o Q (n, n + 2) . But it follows from (30.21) 
that o Q (n + 1, n -f 1), i.e. a(n + 1). Thus ind n o(n), and thus (31.1). □ 

Suppose h Vne(n). Then 1- ind n o{n). Then (30.27) says that Q is 
inductively consistent, which for many purposes is as good as full formal 
consistency. We exploit this as follows. First we arithmetize Q4. Since 
it has an axiom scheme, we do this by introducing u t is a Q 4 -theory" to 
express the notion of an extension by definitions (with an inductive re- 
striction on the number of new symbols) of a finitely axiomatized portion 
of Q 4 . In Chapters 23-28 we developed all the tools necessary (with a fill- 
able gap in the treatment of extensions by definition of a function symbol) 
to arithmetize the entire development of predicative arithmetic, so that, 
still under the assumption that h Vu£(m), we have h t is a Q 4 -theory — > t 
is er-consistent. The point is that all of our results in the arithmetization 
of logic took the form of constructing bounded function symbols, which are 
respected by a 4 if a is inductive. In this way (30.27) becomes an induc- 
tive self-consistency theorem, and we can employ the familiar reasoning of 
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Godel's Second Theorem to derive a contradiction. In doing this, we rel- 
ativize everything by o A \ for example, we replace the notion of a proof by 
a proof such that the number of occurrences of symbols in it satisfies o 4 . 
Thus if h \Jne{n) then predicative arithmetic is inconsistent. 

Without the impredicative assumption Vnefn), the formula o(n) is not 
inductive. Nevertheless, we have a(0) and we have the rule of inference 

infer a(Sb) from <j(b), 

where b is a bounded variable-free term. To see this, suppose h a(b), so 
that h 3/ expcomp(b, b,/). The proof can be relativized by e\, where e 2 is 
as in Chapter 14, so that h 3f(e\(f) &; expcomp(b, b,/)). Therefore, as 
in the proof of (31.1), h 3g expcomp(b, Sb,#). Relativizing again by erj, we 
have h Sg(e\(g) &z expcomp(b, Sb,<?)), so that h 3/iexpcomp.(b, SSb,/i), 
i.e. h <r (b,SSb), and so h cr(Sb). Thus if h o(h) then h <r(Sb). 

We can think of a(n) as a formalization of the notion that n is a ge- 
netic number. W r e do not have the implication a(n) — + a(Sn) but only 
the inference, from a(b) infer cr(Sb). The distinction expresses the crucial 
difference between the formal and the genetic; it is the difference between 
sitting comfortably in camp and saying, "If I have climbed part way up the 
mountain, then I can always take one more step up the mountain" — and 
actually climbing a mountain, when each successive step requires an act. 

Hence (30.27) is a genetic self-consistency proof for predicative arith- 
metic. It is a remarkable feature of Robinson's Theory that it can prove 
its own tautological consistency (29.26). This is made possible by the 
fact (29.12) that the numbers denoted by terms of the arithmetized the- 
ory are bounded by the terms themselves. For a theory T that is strong 
enough to refer to itself and to prove the full formal consistency theorem, 
or even an inductive version of the consistency theorem, T cannot prove 
its tautological consistency without being inconsistent, by Godel's Second 
Theorem. 

The title of this chapter is not a meaningful question to a nominal- 
ist. Instead we may ask, which formula is it more profitable to adjoin to 
predicative arithmetic, Vne(n) or 3n-^e(n)? 

Paris and Wilkie (see [PW] and [PW2]) have studied the effect of adjoin- 
ing \/ns(ri) and have obtained results relating this to adjoining consistency 
assumptions. There are a number of interesting questions as to whether 
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various results that can be proved with this hypothesis can be proved, or 
interpreted, without it. Certainly the theory with Vti e(n) adjoined is too 
weak to serve as a basis for much of contemporary mathematics. 

The principal objection to adjoining Vrce(rc) is that the consistency of 
the theory is doubtful. One can give a proof of its inductive consistency 
assuming that superexponentiation is total, or of its full formal consistency 
assuming that supersuperexponentiation is total. But to prove the consis- 
tency of the theories with these additional assumptions, one needs further 
assumptions yet. It is as if an attorney were to attempt to establish the re- 
liability of a client by bringing in a character witness, and then a character 
witness to the character witness, and so forth, each one more mafioso than 
the predecessor. Impredicative finitary reasoning is a residue of Platonism 
that has been uncritically accepted by the finitists. 

As we have seen, it is consistent to adjoin 3n^E(n), provided only that 
Q is consistent. Therefore the resulting theory, which may be called Non- 
Peano Arithmetic, is logically very weak. Nevertheless, it is very strong 
mathematically. As Hook has shown in his Princeton thesis [Ho], it can 
be used to develop substantial portions of analysis, by means that will be 
discussed in the next chapter. 

Rather than adjoin 3n ^e(n) to predicative arithmetic, one can try to 
prove it. This would of course entail the inconsistency of Peano Arithmetic. 
I have put a lot of effort into this, but so far without success. 



Chapter 32 

A modified Hilbert program 



Hilbert's program was to secure the foundations of classical mathemat- 
ics by giving a. finitary consistency proof for it. This formulation of the 
program was undoubtedly influenced by his controversy with Brouwer— 
finitary methods are those (or perhaps a subset of those) that are acccepted 
by the intuitionists. As far at least as arithmetic is concerned, Hilbert's 
aim of demonstrating that classical mathematics is no less secure than is 
intuitionistic mathematics was achieved by Godel's five page paper [G62], 
published in 1933, in which he gave an interpretation of classical arithmetic 
within intuitionistic arithmetic. But by then the problem had been utterly 
transformed by his great paper of 1931. Since finitary methods as com- 
monly understood can be arithmetized, Godel's Second Theorem doomed 
the Hilbert program. 

From a nominalist understanding of mathematics^from the viewpoint 
of Hilbert's formalism taken literally— Hilbert's program can be criticized 
on two counts. First, as I have argued at length, the acceptance of impl- 
icative finitary methods entails a view of mathematics that still contains 
a semantic element. Second, a convinced formalist should investigate the 
consistency of classical mathematics as a genuinely open question. 

Since the original Hilbert program failed, is it sterile to suggest a pro- 
gram with stricter requirements for acceptable evidence of consistency? 
Perhaps not; a modification of Hilbert's program appears to be feasible. 

The modified program is to build up, parallel to classical mathematics, 
a demonstrably consistent elementary mathematics such that most results 
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in the core of classical mathematics have an elementary analogue with the 
same scientific content, and such that the equivalence of the classical to the 
elementary result is easily provable by classical means. 

Here is a candidate, which I will call Q* , for such an elementary math- 
ematics. To begin with, Q* should contain predicative arithmetic. With a 
positive solution to the compatibility problem of Chapter 15, it would be 
easy to make precise what this means. Lacking this, we must proceed in a 
more piecemeal way. The theory Q* is to contain Q4, the higher # symbols 
introduced by Hook (Ho], and semibounded replacement as in Chapter 22. 
Adjoin a unary predicate symbol 4> and the axioms that say that <f> respects 
each bounded function symbol and bounded nonlogical axiom. Adjoin a 
constant N with the axioms e(N), e(2 T N), e(2 | 2 | N), . . . So far, the 
theory is locally interpretable in Q. Finally, adjoin the axiom ~><f>[N). 

Here is a consistency argument for Q* . Let us omit the higher # sym- 
bols; the conceptual issues are the same. Interpret <f> as e 4 . Then, as we 
have seen, Q 4 \3n ^4>(n)\ is consistent if Q is. In this theory, introduce a 
constant 7V with -^(A T ) and introduce N by TV = Log . . . Log N , with 
v + 1 occurrences of Log. Then we cannot prove 4>(N), for if we could, 
then by v + 1 successive relativization arguments we could prove <^(jVo)- 
Therefore it is consistent to adjoin -><f>(N), and we have e(N), e(2 | TV), 
. . and e{2 | • • ■ | 2 ] N) with v occurrences of 2 (and v is arbitrary). 

This is a finitary but impredicative consistency proof for Q* \ the se- 
mantic element in the proof enters in the usual proof that Q is consistent, 
which involves the assumption that superexponentiation is total. A proof 
of the inductive consistency of Q* can be based on the assumption that ex- 
ponentiation is total (so that o{n) is inductive). There are indications that 
it should be possible to demonstrate the genetic consistency of Q* with no 
appeal to semantics at all, that Q* is truly demonstrably consistent, but 
such an investigation must await the future. 

The formula <j>(n) is similar to the formula "n is standard" in one ver- 
sion jNe] of nonstandard analysis; the axioms of Q* asserting that <f> re- 
spects all bounded function symbols and bounded nonlogical axioms have 
the consequence that if h^* D, where D is bounded, then h^* D<* — this is 
similar to the transfer principle of nonstandard analysis; the axiom -><f>(N) 
is similar to the idealization principle of nonstandard analysis; the use of 
a many-sorted theory in Hook's thesis [Ho] is perhaps similar to the stan- 
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dardization principle of nonstandard analysis. What we have in Q* is a 
grafting of Abraham Robinson's extremely powerful methods of nonstan- 
dard analysis (see [Rn]) onto Raphael Robinson's theory. 

The theory Q* is logically very weak but mathematically very strong. 
The number N such that -^(iV) is in some sense an infinite number, since 4> 
is inductive, and yet the axioms e(iV), e{2 f TV), . . . allow us to construct the 
set of all numbers smaller than N and iterated power sets of this set. Once 
one has an infinite, or in a better terminology an unlimited, natural number, 
one has infinitesimal rational numbers, and one can introduce real numbers 
as a new sort of object: a real number is a limited rational number, and two 
real numbers are equal in case their difference is infinitesimal; see [Ho]. In 
this way, Hook develops a substantial portion of real and p-adic analysis. 

Probability theory is very well adapted to such an approach. Con- 
sider the set of all 2^ paths indexed by the rational numbers k/N for 
k = 0, . . . , JV, each of which goes up or down by 1/y/N at each step. This 
is an elementary nonstandard model of Brownian motion and, for example, 
Wiener's theorem that the paths of Brownian motion are almost surely con- 
tinuous can be given an elementary formulation and proof in this context. 
Also, the classical form of Wiener's theorem is easily deducible from the 
elementary form by classical, non-elementary means. This will be discussed 
in detail in a book [Ne2] that is in preparation. 

I am not, of course, suggesting that classical mathematics should be 
abandoned in favor of an elementary mathematics such as Q* . Any theory 
is consistent until proved inconsistent. But I am confident that the modi- 
fied Hilbert program will repay the efforts of those who find it interesting. 
The advent of computers has raised the problems of computational com- 
plexity to a position of central importance in mathematics. In the world 
of feasible computations, exponentiation is not total. For results relating 
questions of computational complexity to syntactical questions in portions 
of arithmetic, see |Buj and the references cited there. Nonstandard analysis 
and computers are recent developments that are transforming mathematics, 
and the semantical interpretation of mathematics is perhaps unsuitable for 
both of these developments. I hope that a mathematics shorn of semantical 
content will prove useful as we explore new terrain. 
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e 14.1! 
| 14.4! 
A 14.8(!) 
#o 14.14(!) 
> 16.9 
ft 16.36! 
* 19.18 
£ 19.23 
I! 19.26 
•* 19.30 
{ > 19.32 
■[•,■] 19.35 
x 20.15 
~ 23.7 

V 23.8 
3 23.9 
= 23.10 

[ 1 23.51 
~ 23.55 

V 23.56 
3 23.57 



V 23.58 

~ 23.59 & 23.60 

« 23.61 

= 23.62 

^ 23.63 

■I 24.19 

■:• h • 25.1 

~ 25.53 

■[•] 26.6 

o 27.6 

•(.) 28.2 



6 29.1 
+ 29.4 
■29.5 
+ 29.8 
• 29.9 
cr 30.19! 
o 30.24! 

t7-consistent 30.25! 
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